How to Install a Free SSL Certificate on WordPress in 2026 (Let's Encrypt & Cloudflare)
Disclosure: Some links in this article are affiliate links. If you click and make a purchase, we may earn a commission at no extra cost to you. This does not influence our editorial recommendations - we only recommend products and services we genuinely believe in. Read our full affiliate disclosure.
Browsers like Google Chrome and Apple Safari immediately flag websites without active SSL certificates as "Not Secure," driving visitors away and damaging your search engine rankings. In 2026, you should never pay $50 to $100 per year for a standard SSL certificate.
Free, automated, industry-standard certificates from Let's Encrypt and Cloudflare provide identical 256-bit encryption for zero dollars. Here is how to install a free SSL certificate on WordPress in under 10 minutes.
Method 1: Automated Let's Encrypt via Your Hosting Panel
95% of modern web hosts (Hostinger, cPanel, SiteGround, Cloudways) provide 1-click Let's Encrypt provisioning:
- Log into your hosting control panel (cPanel, hPanel, or Plesk).
- Navigate to the SSL / TLS or Security section.
- Click "Install Free SSL / Issue Certificate".
- Select your root domain ('example.com') and wildcard/www alias ('www.example.com').
- Choose Let's Encrypt (DV) and click Issue.
- The host automatically verifies your domain DNS and installs the certificate with automatic 90-day renewals.
Method 2: Free Cloudflare Universal SSL
If your web host does not support automated Let's Encrypt, Cloudflare provides free edge SSL for any website on the internet:
- Create a free account at Cloudflare.com and add your website domain.
- Cloudflare scans your existing DNS records. Click Continue.
- Change your domain's nameservers at your registrar (Namecheap, GoDaddy, Porkbun) to the two Cloudflare nameservers provided.
- In the Cloudflare dashboard, go to SSL/TLS > Overview and set your encryption mode to Full (Strict).
- Enable "Always Use HTTPS" under Edge Certificates.
Step 3: Updating WordPress URL Settings
Once your certificate is issued, tell WordPress to serve all traffic over HTTPS:
- In your WordPress Admin Dashboard, navigate to Settings > General.
- Change both WordPress Address (URL) and Site Address (URL) from 'http://' to 'https://'.
- Scroll down and click Save Changes. You will be asked to log back in securely.
Fixing "Mixed Content" Warnings (No Green Padlock)
If your browser still shows a broken padlock icon, your theme is loading older images or scripts via insecure 'http://' URLs:
- Install the free Better Search Replace plugin.
- Search for 'http://yourdomain.com' and replace with 'https://yourdomain.com' across all tables.
- Clear your website and browser cache - your green padlock is guaranteed.
Alex Morgan is the founder and lead editor of RemoGrid. With over six years of hands-on experience in remote operations, cross-border freelance workflows, and AI tool benchmarking, Alex independently tests and audits software platforms to help modern digital workers build sustainable online income streams. He regularly reviews international payment systems (Wise, Stripe, Payoneer, local mobile wallets) and conducts real-world usability benchmarks across AI productivity tools.
