{"id":38918,"date":"2018-06-07T08:30:06","date_gmt":"2018-06-07T13:30:06","guid":{"rendered":"https:\/\/wpengine.com\/?p=38918"},"modified":"2025-04-14T14:28:47","modified_gmt":"2025-04-14T19:28:47","slug":"its-time-to-secure-your-wordpress-site-with-https","status":"publish","type":"post","link":"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/","title":{"rendered":"It\u2019s Time to Secure Your WordPress Site with HTTPS"},"content":{"rendered":"

Over the past few years, Google has increasingly stressed the importance of HTTPS encryption for websites, going as far as to mark certain HTTP pages as \u201cnot secure\u201d if they contain data fields for things such as passwords or credit card information. <\/span><\/p>\n

Non-HTTPS status can also affect a website\u2019s <\/span>search ranking<\/span><\/a>, and earlier this year, Google <\/span>announced<\/span><\/a>, with the release of Google Chrome 68 in July, that all HTTP pages will be marked as \u201cnot secure\u201d in an effort to phase out the older, less secure web protocol. <\/span><\/p>\n

While this will help make the internet a safer place, it will also create some issues for site owners who have yet to make the switch. Google Chrome handles the <\/span>vast majority<\/span><\/a> of worldwide browser traffic, and sites that show up as \u201cnot secure\u201d face a potentially massive dip in traffic. <\/span><\/p>\n

CHECK YOUR ENCRYPTION STATUS<\/b><\/h2>\n

To check if your site is already HTTPS-encrypted, visit your domain using \u201chttps:\/\/\u201d in the URL. If you see a green padlock next to the \u201chttps:\/\/\u201d your site is encrypting its traffic and you are good to go:<\/span><\/p>\n

\"\"<\/p>\n

If you see something else, you\u2019ll need to take action before Chrome 68 is released in order to avoid some of the negative outcomes mentioned above. The good news is, securing your site with HTTPS is a relatively painless process. HTTPS encryption is acquired through something called an <\/span>SSL certificate<\/span><\/a>, which helps authenticate websites and ensures that hackers cannot see or intercept data your users share on your site. <\/span><\/p>\n

To add an SSL certification to a WordPress site, site owners will either need to purchase an SSL certification or use a free option\u2014the type of certification that\u2019s right for you depends on the site it will be applied to. Once the certification has been acquired, it will need to be installed on your server and set up for your site or multiple sites. <\/span><\/p>\n

At WP Engine, we offer a <\/span>number of options<\/span><\/a> for adding this layer of security, including a free SSL certification through <\/span>Let\u2019s Encrypt<\/span><\/a>, an automated, open certificate authority. <\/span><\/p>\n

LET\u2019S ENCRYPT<\/b><\/h2>\n

Let\u2019s Encrypt certificates provide the same level of security as paid certificates and offer the same HTTPS protection. Because these certificates are fully automated, WP Engine will also automatically renew them for you after you set them up.<\/span><\/p>\n

\"\"<\/p>\n

Setting up a Let\u2019s Encrypt SSL certificate is easy. Once you\u2019ve logged into your <\/span>User Portal<\/span><\/a>, simply select the domains for which you would like to add an SSL certificate, ensure you\u2019ve read and agreed to the Terms and Conditions, and then click \u201cRequest SSL Certificate\u201d to get the process started. \u00a0<\/span><\/p>\n

Your SSL order will take about 15 minutes to process, and then it will appear on the SSL page in your User Portal where you will be able to configure your SSL settings. <\/span><\/p>\n

IMPORTING NEW OR EXISTING CERTIFICATES<\/b><\/h2>\n

Another option for adding HTTPS encryption to your site is to import a new or existing <\/span>third-party SSL certificate<\/span><\/a> through your WP Engine account. It\u2019s important to note that this option is only available for Growth\/Professional plans and higher.<\/span><\/p>\n

Importing a third-party SSL certificate is ideal if you already have a valid certificate you want to use, or if you need to use an extended Validation (EV) or Multi-Domain certificate (SAN). Otherwise, the Let’s Encrypt option is likely the best way to secure your WordPress site.\u00a0<\/span><\/p>\n

HTTPS DOESN\u2019T EQUAL 100% SECURE<\/b><\/h2>\n

It\u2019s important to note that SSL certification is just one of the many components WP Engine uses to keep its customers\u2019 sites safe and secure. While adding HTTPS encryption to your site is highly recommended and will benefit you and your users\/customers, it is not a singular security solution. <\/span><\/p>\n

Every site is unique and requires different layers and levels of security\u2014HTTPS encryption is just one part of that. However, adding this layer of security will go a long way towards keeping bad actors away from your site and the data your users\/customers entrust you with. <\/span><\/p>\n

CONCLUSION<\/b><\/h2>\n

Security is a shared responsibility and Google\u2019s push for the wider adoption of HTTPS encryption is an effort to make the web safe for everyone. By helping users understand that HTTP is not secure, and that information transmitted over HTTP connections can be intercepted by bad actors, Google is also raising awareness of the risks that exist in today\u2019s evolving world of cybersecurity. <\/span><\/p>\n

By acquiring SSL certification and switching over to HTTPS encryption, site owners will not only be protecting themselves and their users\/customers from potentially-disastrous data breaches, they will be joining a growing majority of web users who are making this level of encryption and security the norm when it comes to securing their sites. \u00a0<\/span><\/p>\n

Still have questions about HTTPS encryption and SSL certification? Leave a comment below or <\/i><\/b>contact WP Engine<\/i><\/b><\/a> for help finding the best fit for your website. \u00a0<\/i><\/b><\/p>\n","protected":false},"excerpt":{"rendered":"

Over the past few years, Google has increasingly stressed the importance of HTTPS encryption for websites, going as far as to mark certain HTTP pages as \u201cnot secure\u201d if they contain data fields for things such as passwords or credit card information. Non-HTTPS status can also affect a website\u2019s search ranking, and earlier this year,…<\/span><\/span><\/p>\n","protected":false},"author":200,"featured_media":38928,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[85],"tags":[396],"class_list":["post-38918","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security-2","tag-https"],"yoast_head":"\nIt\u2019s Time to Secure Your WordPress Site with HTTPS<\/title>\n<meta name=\"description\" content=\"Google no longer considers HTTP pages secure. Here's how you can switch your WordPress site over to HTTPS to improve security.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"It\u2019s Time to Secure Your WordPress Site with HTTPS\" \/>\n<meta property=\"og:description\" content=\"Google no longer considers HTTP pages secure. Here's how you can switch your WordPress site over to HTTPS to improve security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/\" \/>\n<meta property=\"og:site_name\" content=\"WP Engine\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/wpengine\" \/>\n<meta property=\"article:published_time\" content=\"2018-06-07T13:30:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-14T19:28:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/wpengine.com\/resources\/wp-content\/uploads\/2018\/06\/shutterstock_748916752.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Abe Selig\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@wpengine\" \/>\n<meta name=\"twitter:site\" content=\"@wpengine\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Abe Selig\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/\",\"url\":\"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/\",\"name\":\"It\u2019s Time to Secure Your WordPress Site with HTTPS\",\"isPartOf\":{\"@id\":\"https:\/\/wpengine.com\/resources\/#website\"},\"datePublished\":\"2018-06-07T13:30:06+00:00\",\"dateModified\":\"2025-04-14T19:28:47+00:00\",\"author\":{\"@id\":\"https:\/\/wpengine.com\/resources\/#\/schema\/person\/b732a884dbf4917dcd15ce2e9fbd3652\"},\"description\":\"Google no longer considers HTTP pages secure. Here's how you can switch your WordPress site over to HTTPS to improve security.\",\"breadcrumb\":{\"@id\":\"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/wpengine.com\/resources\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"It\u2019s Time to Secure Your WordPress Site with HTTPS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/wpengine.com\/resources\/#website\",\"url\":\"https:\/\/wpengine.com\/resources\/\",\"name\":\"WP Engine\",\"description\":\"Managed Hosting for WordPress\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/wpengine.com\/resources\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/wpengine.com\/resources\/#\/schema\/person\/b732a884dbf4917dcd15ce2e9fbd3652\",\"name\":\"Abe Selig\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/wpengine.com\/resources\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6deb04da8be57a16bed1b5ad7722572beaa7ed7292795763c9324d46b0ad9454?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6deb04da8be57a16bed1b5ad7722572beaa7ed7292795763c9324d46b0ad9454?s=96&d=mm&r=g\",\"caption\":\"Abe Selig\"},\"description\":\"Abe Selig is a writer, amateur musician and accomplished inshore fisherman. He began his career as a journalist and now tells stories about technology and the ways it\u2019s helping businesses thrive. He is an Austin, TX native who has lived in New York City and traveled all around the world. You can reach him at abe.selig@wpengine.com.\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"It\u2019s Time to Secure Your WordPress Site with HTTPS","description":"Google no longer considers HTTP pages secure. Here's how you can switch your WordPress site over to HTTPS to improve security.","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"It\u2019s Time to Secure Your WordPress Site with HTTPS","og_description":"Google no longer considers HTTP pages secure. Here's how you can switch your WordPress site over to HTTPS to improve security.","og_url":"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/","og_site_name":"WP Engine","article_publisher":"https:\/\/www.facebook.com\/wpengine","article_published_time":"2018-06-07T13:30:06+00:00","article_modified_time":"2025-04-14T19:28:47+00:00","og_image":[{"width":1200,"height":627,"url":"https:\/\/wpengine.com\/resources\/wp-content\/uploads\/2018\/06\/shutterstock_748916752.jpg","type":"image\/jpeg"}],"author":"Abe Selig","twitter_card":"summary_large_image","twitter_creator":"@wpengine","twitter_site":"@wpengine","twitter_misc":{"Written by":"Abe Selig","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/","url":"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/","name":"It\u2019s Time to Secure Your WordPress Site with HTTPS","isPartOf":{"@id":"https:\/\/wpengine.com\/resources\/#website"},"datePublished":"2018-06-07T13:30:06+00:00","dateModified":"2025-04-14T19:28:47+00:00","author":{"@id":"https:\/\/wpengine.com\/resources\/#\/schema\/person\/b732a884dbf4917dcd15ce2e9fbd3652"},"description":"Google no longer considers HTTP pages secure. Here's how you can switch your WordPress site over to HTTPS to improve security.","breadcrumb":{"@id":"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/wpengine.com\/resources\/its-time-to-secure-your-wordpress-site-with-https\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wpengine.com\/resources\/"},{"@type":"ListItem","position":2,"name":"It\u2019s Time to Secure Your WordPress Site with HTTPS"}]},{"@type":"WebSite","@id":"https:\/\/wpengine.com\/resources\/#website","url":"https:\/\/wpengine.com\/resources\/","name":"WP Engine","description":"Managed Hosting for WordPress","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wpengine.com\/resources\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/wpengine.com\/resources\/#\/schema\/person\/b732a884dbf4917dcd15ce2e9fbd3652","name":"Abe Selig","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wpengine.com\/resources\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6deb04da8be57a16bed1b5ad7722572beaa7ed7292795763c9324d46b0ad9454?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6deb04da8be57a16bed1b5ad7722572beaa7ed7292795763c9324d46b0ad9454?s=96&d=mm&r=g","caption":"Abe Selig"},"description":"Abe Selig is a writer, amateur musician and accomplished inshore fisherman. He began his career as a journalist and now tells stories about technology and the ways it\u2019s helping businesses thrive. He is an Austin, TX native who has lived in New York City and traveled all around the world. You can reach him at abe.selig@wpengine.com."}]}},"acf":[],"_links":{"self":[{"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/posts\/38918","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/users\/200"}],"replies":[{"embeddable":true,"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/comments?post=38918"}],"version-history":[{"count":0,"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/posts\/38918\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/media\/38928"}],"wp:attachment":[{"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/media?parent=38918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/categories?post=38918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wpengine.com\/resources\/wp-json\/wp\/v2\/tags?post=38918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}