Most website addresses you visit today start with https://. That extra "s" is possible because of an SSL certificate.
An SSL certificate is a small data file on your server that proves your site's identity and encrypts the connection between the server and your visitors. Without one, a WordPress site can only load over plain HTTP.
Why your site needs an SSL certificate
SSL stands for Secure Sockets Layer. The modern version is actually called TLS, or Transport Layer Security, but most people still say SSL. Here is what it gives your site:
- Encryption: login details, form entries and payment data travel in a scrambled form that others cannot read.
- Trust: browsers mark sites without HTTPS as "Not secure", which scares visitors away.
- SEO: Google uses HTTPS as a small ranking signal.
Think of it as sending a letter in a sealed envelope instead of on a postcard.
Types of SSL certificates
There are three validation levels. Domain Validated (DV) certificates only confirm that you control the domain, and they are enough for most blogs. Organization Validated (OV) and Extended Validation (EV) certificates also check the business behind the site.
The good news is that plenty of hosts now give you a DV certificate free of cost, usually through Let's Encrypt, and renew it automatically.
How to move WordPress to HTTPS
- First, install or activate the certificate from your hosting control panel.
- Next, go to Settings → General and change both URL fields from http to https.
- Now, redirect all HTTP traffic to HTTPS with your host's setting or a rule in .htaccess.
- Finally, open a few pages and check for mixed content warnings.
Our guide on how to force SSL in WordPress explains each step, and our full article on SSL certificates covers the basics in more depth.
Mixed content happens when a secure page still loads some images or scripts over plain http. Replacing the old http links in your database usually fixes it.
Now you know why every WordPress site needs an SSL certificate, and it is often free to set up. If you face any issue, let us know in the comment box below.