{"id":1492,"date":"2017-11-10T15:29:09","date_gmt":"2017-11-10T15:29:09","guid":{"rendered":"http:\/\/reseller-hosting-themes.com\/wordpress\/?p=1492"},"modified":"2017-11-06T15:29:58","modified_gmt":"2017-11-06T15:29:58","slug":"ssl-for-wordpress","status":"publish","type":"post","link":"https:\/\/reseller-hosting-themes.com\/wordpress\/ssl-for-wordpress\/","title":{"rendered":"SSL for WordPress &#8211; why you need it and how to install it"},"content":{"rendered":"<p><img decoding=\"async\" loading=\"lazy\" class=\"alignright wp-image-1620 size-medium\" src=\"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-content\/uploads\/2017\/06\/ssl-for-wordpress-300x225.png\" alt=\"SSL for WordPress\" width=\"300\" height=\"225\" srcset=\"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-content\/uploads\/2017\/06\/ssl-for-wordpress-300x225.png 300w, https:\/\/reseller-hosting-themes.com\/wordpress\/wp-content\/uploads\/2017\/06\/ssl-for-wordpress.png 640w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>Many websites, including e-stores and subscription portals, ask their visitors to share sensitive information such as credit\/debit card details, home address, phone number, etc.<\/p>\n<p>However, the web is not as secure as it used to be a decade ago and there are countless threats for your visitors\u2019 security.<\/p>\n<p>Whatever the reason for a hacker\u2019s attack, if your clients\u2019 sensitive data is compromised, chances are that not only will they not return but you\u2019ll be blacklisted and best case scenario, hardly welcome any newly registered users for a long time.<\/p>\n<p>That\u2019s why SSL can be crucial for a website owner.<\/p>\n<p>In the article below, we will give you details on how to setup\u00a0SSL for WordPress quickly and efficiently.<\/p>\n<h2>What is SSL?<\/h2>\n<p>The widely used term SSL is an abbreviation for &#8216;Secure Sockets Layer&#8217;.<\/p>\n<p>It represents a type of cryptographic protocol, which is used for secure exchange of information between a website and the web browsers of its visitors.<\/p>\n<p>It encrypts the exchanged\u00a0data, in order to add another\u00a0level of security.<\/p>\n<p>Today a vast majority of Internet sites on the world-wide web use SSL Certificates.<\/p>\n<p>That\u2019s why, its presence is regarded as a guarantee for a website\u2019s authenticity by random web users.<\/p>\n<h2>The advantages of having an SSL for WordPress<\/h2>\n<p>In simple terms, implementing SSL for\u00a0WordPress is the process of migrating from the obsolete HTTP to the up-to-date HTTPS protocol.<\/p>\n<p>In this article, we will use the SSL and the HTTPS terms interchangeably, because of their similarities in this particular context.<\/p>\n<p>The main differences between HTTP and HTTPS are the following:<\/p>\n<ul>\n<li><strong>Website security:<\/strong>\u00a0With HTTP, the information is sent and received in plaintext. This creates potential for man-in-the-middle attacks, during which an attacker can steal personal details without the users knowledge. With HTTPS, the data transmitted between the site and the visitor is encrypted and cannot be decrypted by any third party.<\/li>\n<li><strong>The padlock:<\/strong>\u00a0To easily identify when a site is using an SSL certificate, browsers will display a padlock next to the URL. If you click on the padlock, you will detailed information about the actual certificated, used by the website.<\/li>\n<li><strong>Price difference:<\/strong> HTTP is, for now, the default state of each page that is published online. As such, it&#8217;s completely free. To have your site working over HTTPS, you need to purchase an SSL certificate and then renew it on an annual basis. However, there are also free SSL Certificate providers, like Comodo or <a href=\"https:\/\/reseller-hosting-themes.com\/wordpress\/free-lets-encrypt-ssl-certificates\/\">Let&#8217;s Encrypt<\/a>.<\/li>\n<\/ul>\n<h2>Why you need to get\u00a0an SSL Certificate today<\/h2>\n<p>Below, we will list some of the basic reasons why migrating to HTTPS is a good long-term investment for your website.<\/p>\n<ul>\n<li><strong>Better SEO:<\/strong> Search engine optimization basically means getting more traffic, thanks to search engines. As you\u2019re probably aware, there are quite a few ranking signals that Google analyzes in order to determine the ranking for a given website. It is important to know that HTTPS is among the officially declared ones. Google says that HTTPS sites have higher rankings than HTTP-based ones.<\/li>\n<li><strong>Security:<\/strong> Needless to say, the security of your visitors should be your top priority. It is even more essential if you collect payments. In case it is ever compromised, it is less than likely that any of the affected will return and you\u2019ll probably need to create a new website from scratch to welcome new visitors. That being said, SSL helps a lot for the security of your site, since when in use, the traffic is 100% encrypted. Your visitors will also be able to tell whether you\u2019re using it because of the green padlock and feel safe browsing through your site and making orders.<\/li>\n<li><strong>Website credibility:<\/strong> All of the popular internationally-visited sites on the web use HTTPS today. For example: Youtube, Google and Mozilla. As a result of this, the green padlock, which can be seen in their addresses is considered as a sign of good reputation and credibility. Therefore, visitors will find a website, which uses SSL trustworthy. Of course, sometimes that is not a wise decision, as there are non-legit sites on the web, which use this protocol.<\/li>\n<li><strong>For eCommerce stores:<\/strong> it is hardly possible to own a successful eCommerce store nowadays without SSL. Per PCI Compliance, you are required to use SSL in order to accept credit cards and PayPal payments.<\/li>\n<\/ul>\n<p>As you can see your targeted visitors will only trust your website and enter their credit\/debit card details or any other type of sensitive data when you use SSL. Below, we will show you how to implement the SSL for WordPress.<\/p>\n<h2>How to get an SSL\u00a0for WordPress<\/h2>\n<p>Every SSL certificate is a virtually authorized document. When you get one, you\u2019re allowed to use SSL encryption for a specified period of time.<\/p>\n<p>Currently, the price of an SSL is in the range of $60 &#8211; $200 and it is dependant on its period of validity \u2013 the longer it is, the higher the price.<\/p>\n<p>Therefore, you should remember to regularly renew your certificate in order to keep using SSL for your site.<\/p>\n<p>There are two ways to get an SSL certificate:<\/p>\n<ul>\n<li>Purchase it from a trusted seller.<\/li>\n<li>Join the Let\u2019s Encrypt initiative and get a free SSL certificate. It has issued more than 24 million certificates by December 2016.<\/li>\n<\/ul>\n<p>After you\u2019ve obtained your SSL certificate, you need to install it. You can contact your web hosting service provider or the certificate provider and they will do this for you.<\/p>\n<h2>How to install an SSL\u00a0for WordPress<\/h2>\n<p>In order to take advantage of your SSL everywhere on your website, update your WordPress site settings:<\/p>\n<ul>\n<li>Go to: Settings &gt; General<\/li>\n<li>Add: https:\/\/www.mydomain.com\/ in both Site URL &amp; Home URL fields<\/li>\n<li>Make sure to replace \u2018mydomain.com\u2019 with your domain name<\/li>\n<li>Click on: \u201cSave Changes.\u201d<\/li>\n<\/ul>\n<p>The aforementioned steps can sometimes be unsafe for old WordPress based websites. Alternatively, you can use the <a href=\"https:\/\/wordpress.org\/plugins\/really-simple-ssl\/\" target=\"_blank\" rel=\"noopener noreferrer\">Really Simple SSL<\/a> WordPress plugin. It will do all that automatically and update you whether there are some other things you should fix.<\/p>\n<p>If you don&#8217;t want to install additional plugins, just add the following program code in your .htaccess file:<\/p>\n<pre><em>RewriteEngine On<\/em>\r\n<em>RewriteCond %{SERVER_PORT} 80<\/em>\r\n<em>RewriteRule ^(.*)$ https:\/\/www.your_domain.com\/$1 [R,L]<\/em><\/pre>\n<p>Then, replace: your_domain.com with your domain name. As a result, all pages will be redirected to https with an updated, HTTPs URL.<\/p>\n<p>You can also force the use of SSL for the\u00a0admin area, to prevent any unsecured connections. Simply\u00a0add the following short line of code in the wp-config.php file above \u201cThat\u2019s all, stop editing!\u201d line:<\/p>\n<pre><em>define( \u2018FORCE_SSL_ADMIN\u2019, true );<\/em><\/pre>\n<p>This way, your dashboard will become HTTPS-friendly.<\/p>\n<h2><strong>Don&#8217;t forget to update hardcoded URLs<\/strong><\/h2>\n<p>In case you run an older website, then all of its links will have to be updated in accordance with the new HTTPs standard.<\/p>\n<p>One option is to search for and replace these links individually. Luckily there\u2019s an alternative.<\/p>\n<p>Before you proceed any further, make a full backup of your WordPress database. Then do the following:<\/p>\n<ul>\n<li>Install the useful <a href=\"https:\/\/wordpress.org\/plugins\/better-search-replace\/\" target=\"_blank\" rel=\"noopener noreferrer\">Better Search Replace<\/a> plugin by Delicious Brains Inc.<\/li>\n<li>Go to: Tools &gt; Better Search Replace in order to use the plugin<\/li>\n<li>Search for: \u2018https:\/\/your_domain.com\u2019 and replace it with the updated version, in other words: \u2018https:\/\/your_domain.com.\u2019<\/li>\n<\/ul>\n<p>This way, all the outdated URLs will be replaced with the HTTPs ones.<\/p>\n<h2>How to test if everything is working<\/h2>\n<p>Once you are done with the aforementioned steps, it is recommended that you perform some tests to verify that everything works properly just like it did before migrating to HTTPs. Follow these tips:<\/p>\n<ul>\n<li>Use the <a href=\"https:\/\/www.jitbit.com\/sslcheck\/\" target=\"_blank\" rel=\"noopener noreferrer\">Jitbit\u2019s SSL-check<\/a> tool to identify any insecure content on your website.\u00a0However, they do have a crawl limit &#8211; 200 pages per website.<\/li>\n<li>Another tool to test if there are non-secure elements on your website is\u00a0<a href=\"https:\/\/www.whynopadlock.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Whynopadlock<\/a><\/li>\n<li>In addition, use the <a href=\"https:\/\/www.ssllabs.com\/ssltest\/\" target=\"_blank\" rel=\"noopener noreferrer\">SSL Labs test<\/a>, so as to get a complete and up-to-date picture of your configurations.<\/li>\n<li>Visit a few pages of your website and check whether all of them have the padlock icon visibly displayed.<\/li>\n<li>Search for \u201csite:your_domain.com\u201d on Google, in order to ensure that all the indexed links are properly redirected and are https. Remember that it takes some time for Google to pick up the redirection. That\u2019s why always make sure that your sitemap is submitted, and that you can reindex your website manually.<\/li>\n<li>Use the <a href=\"https:\/\/wordpress.org\/plugins\/ssl-insecure-content-fixer\/\" target=\"_blank\" rel=\"noopener noreferrer\">SSL Insecure Content Fixer<\/a> plugin to fix any mixed content warnings that may appear on your WordPress based website.<\/li>\n<\/ul>\n<h2>Conclusion<\/h2>\n<p>Although the HTTP to HTTPs migration with the addition of SSL for WordPress described above may sound a bit complicated and time-consuming, it is rather important, especially if you run a business-oriented website.<\/p>\n<p>If you want to welcome many new targeted visitors and keep the existing ones, you need proper SEO and security.<\/p>\n<p>HTTP is getting more and more out-of-date, though once used for the creation of the world-wide web. Stay up-to-date, using HTTPs.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn how to quickly install SSL for WordPress with no plugins. See how you can easily test if the SSL certificated is configured correctly.<\/p>\n","protected":false},"author":1,"featured_media":1620,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"_links":{"self":[{"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/posts\/1492"}],"collection":[{"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/comments?post=1492"}],"version-history":[{"count":15,"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/posts\/1492\/revisions"}],"predecessor-version":[{"id":2305,"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/posts\/1492\/revisions\/2305"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/media\/1620"}],"wp:attachment":[{"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/media?parent=1492"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/categories?post=1492"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/reseller-hosting-themes.com\/wordpress\/wp-json\/wp\/v2\/tags?post=1492"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}