WordPress is one of the most popular CMS with over 35% of internet website are build on WordPress CMS at this time of writing this post. There other CMS like Squarespace, Joomla, Drupal etc but use by only fewer sites. WordPress is far ahead as compared to its competitor. Previously WordPress users to create a blog or website But now WordPress core code changed a lot as well as the massive ecosystem of Plugins and theme, you can create any type of website with WordPress.
As WordPress is more popular CMS, therefore, it is the main target for a hacker. As per Sucuri WordPress accounted for 90 per cent of all hacked CMS sites in 2018. WordPress is very secure by default itself most of the security breach occurs due to the use of theme and plugin from unauthorized sources. on WordPress Platform website security hardening means securing a website by reducing its surface of vulnerability. More use of theme and plugin, Showing directory or WordPress version provides a potential entry point to a hacker.
Importance of SSL Certificate-:
Moving to HTTP to HTTPS is have lots of advantages. It helps to gain the trust of your user if you are selling any product. HTTP to HTTPS migration can improve your SEO ranking. As per Google SEO guideline, the website that provides secure connection will get higher ranking in Google Search result. You may have seen that Google Chrome shows the HTTP site as Insecure site. Google Declared HTTPS a ranking signal. Google Started to index HTTPS pages first in Search Results.
HTTPS is being used for communication over Hypertext Transfer Protocol (HTTP) with an ‘S’ in the end that stands for ‘Secure.’ An HTTPS connection performs major three roles which is Authentication, Encryption and Data integrity. HTTPS is very helpful to gain the trust of the user, if you are selling anything through your website, HTTPS connection can boost your online sale because the user will trust your website. According to Builtwith, as of February 2018, 49.8% of the top 10,000 websites are using HTTPS. That is up from 5.68% back in September 2015.
There are big players in the market from whom you can buy the SSL certificate if you are using a self-hosted WordPress website then you can buy SSL certificate from your web hosting provider. In this post, I will share tips, How to get secure your website using SSL certificate without spending a single penny. The only condition you have to renew the SSL certificate every three months without any cost.
How to Install Free SSL Certificate in WordPress-:
- Log on www.sslforFree.com and Sign up and create an account.
- Once you have created an account you have to verify the domain so you are the domain owner. You will have the following three methods to verify your domain.
The recommended method is manual verification, where you have to upload verification files to your Hosting cPanel, once your domain gets verified you will get SSL certificate which you have to Upload SSL/TLS section of your Hosting cPanel. For more info watch the video.
sslforfree uses Let’s Encrypt ACME server to generate the SSL certificate. sslforfree is free for all usages including commercial usage. If your website gives any security issue visit to https://www.ssllabs.com/ to check SSL certificate installation issues and fix. If your WordPress website shows a red “Not Secure” or “Insecure” in the address bar after installation You can try going to https://whynopadlock.com to see issues and fix.
Web servers do not redirect to HTTPS by default. If you want to force it you will have to configure it to force a redirect. This configuration will depend on your server setup. If you need help with this your best bet would be to contact your host, professional developer or admin for help. Change your website URL from Http to Https.
Install the plugin WP force SSL.WP Force SSL helps you redirect insecure HTTP traffic to secure HTTPS one without the need to touch any code. Just activate Force SSL and everything will be configured for you. The entire site will move to HTTPS using your SSL certificate.
Thanks for reading…“Pardon my grammar, English is not my native tongue.”
If you like my work, Please Share on Social Media! You can Follow WP knol on Facebook, Twitter, Pinterest and YouTube for latest updates. You may Subscribe to WP Knol Newsletter to get latest updates via Email. You May also Continue Reading my Recent Posts Which Might Interest You.