Web hosting guide
Free SSL explained: what a free SSL certificate does and how to get one
Updated on ยท 8 questions answered
A free SSL certificate is a certificate that encrypts the connection between a visitor's browser and your website, at no charge. With it the address starts with https and the browser shows a padlock. Most hosting plans include one.
What does an SSL certificate do?
It does two things. It encrypts the data that travels between the visitor and the website, so passwords and form entries cannot be read on the way. It also proves that the visitor reached the real domain and not a copy.
Where does a free SSL certificate come from?
Most free certificates come from Let's Encrypt, a nonprofit certificate authority. The hosting company requests the certificate for your domain, installs it and renews it. You do not buy or upload anything.
Is a free SSL certificate as secure as a paid one?
Yes, for encryption. A free certificate and a paid one encrypt the connection in the same way. They differ in what was checked before the certificate was issued, and in the extras sold with it.
| Point | Free certificate | Paid certificate |
|---|---|---|
| Encryption | Same | Same |
| What is checked | Control of the domain | Control of the domain; some types also check the organisation |
| How long it lasts | 90 days, renewed automatically | About a year |
| Warranty | None | Offered by some issuers |
| Who installs it | The hosting company, automatically | You or the hosting company |
Do I need SSL if my site takes no payments?
Yes. Browsers mark a page without https as "Not secure", even when it has no form. Google has also said that it uses https as a ranking signal, in its post HTTPS as a ranking signal.
How do I turn on free SSL?
- Point the domain to the hosting plan.
- Open the SSL or security page in the hosting control panel.
- Select the domain and choose install. Many plans do this step for you.
- Open the site with https:// in front of the address and look for the padlock.
- Turn on the setting that sends every http visit to https.
Why does my site still say "Not secure" after SSL is installed?
There are three common causes:
- The page loads an image or script through an http address. This is called mixed content.
- The certificate does not cover the www version of the domain, or the version without www.
- The domain was pointed to the hosting plan a short time ago and the certificate has not been issued yet.
Does free SSL renew on its own?
Yes, on a hosting plan that includes it. The hosting company renews the certificate before its 90 days end. It stops renewing when the domain no longer points to that hosting plan.
Which plans did we test?
The Hostinger coupon code page lists the plans we tested at the real checkout and the discount on each period.