Step 1: Obtain a ZeroSSL Certificate

ZeroSSL offers free SSL certificates, which is a great option for securing your site without any cost. Here’s how to get one:

1. Visit ZeroSSL: Go to ZeroSSL’s website.
2. Sign Up/Login: If you don’t have an account, create one. If you already have an account, log in.
3. Create a New Certificate:
   • Click on the “New Certificate” button.
   • Enter your domain name. If you have multiple domains, you can add them here (SAN – Subject Alternative Name).
   • Select “90-Day Certificate” (which is free) and proceed.
4. Verify Your Domain: ZeroSSL offers several verification methods (DNS, HTTP file upload, or Email). Choose the one that suits you best and complete the verification process.
5. Download Your Certificate: Once your domain is verified, ZeroSSL will generate the SSL certificate files. Download the ZIP file containing your certificate, private key, and CA bundle.

Step 2: Install the SSL Certificate on GoDaddy cPanel

Now that you have your SSL certificate from ZeroSSL, it’s time to install it on your GoDaddy cPanel:

1. Log into GoDaddy: Access your GoDaddy account and go to your product list. Find your hosting account and click “Manage”.
2. Access cPanel: In your hosting account, click on “cPanel Admin” to open the cPanel dashboard.
3. Navigate to SSL/TLS:
   • Under the “Security” section, click on “SSL/TLS”.
   • Click on “Manage SSL sites” under “Install and Manage SSL for your site (HTTPS)”.
4. Install Certificate:
   • Scroll down to the “Install an SSL Website” section.
   • Select your domain from the dropdown menu.
   • Open the ZIP file you downloaded from ZeroSSL and copy the content of the certificate file (typically named certificate.crt or similar). Paste it into the “Certificate: (CRT)” box.
   • Copy the content of the private key file (typically named private.key) and paste it into the “Private Key (KEY)” box.
   • Copy the content of the CA bundle file (typically named ca_bundle.crt) and paste it into the “Certificate Authority Bundle: (CABUNDLE)” box.
   • Click “Install Certificate”.

Step 3: Configure WordPress to Use HTTPS

With the SSL certificate installed, you need to configure WordPress to use HTTPS:

1. Update WordPress Settings:
   • Log into your WordPress admin dashboard.
   • Go to “Settings” > “General”.
   • Update the “WordPress Address (URL)” and “Site Address (URL)” from http://yourdomain.com to https://yourdomain.com.
   • Save the changes.
2. Force HTTPS Using .htaccess:
   • Access your website’s root directory using cPanel’s File Manager or an FTP client.
   • Locate the .htaccess file. If it’s not visible, ensure that hidden files are enabled.
   • Edit the .htaccess file and add the following code at the top: <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] </IfModule>
   • Save the changes. This code will force all HTTP traffic to HTTPS.
3. Update Links in Content:
   • To ensure all links within your content use HTTPS, install and activate the “Better Search Replace” plugin.
   • Go to “Tools” > “Better Search Replace”.
   • Search for http://yourdomain.com and replace it with https://yourdomain.com.
   • Run the search and replace.

Step 4: Verify SSL Installation

To ensure your SSL certificate is correctly installed and your website is properly using HTTPS:

1. Check Certificate: Use online tools like SSL Checker to verify the installation.
2. Test Your Site: Visit your website and make sure it loads with https:// and displays a secure padlock icon in the address bar.
3. Fix Mixed Content Issues: If you see any mixed content warnings, use the “Really Simple SSL” plugin to automatically fix these issues.

Conclusion

Securing your WordPress site with an SSL certificate is crucial for protecting your data and enhancing user trust. By following these steps, you can easily install a ZeroSSL certificate on your GoDaddy hosted site and enforce HTTPS. This not only ensures data security but also improves your site’s SEO and overall user experience. If you encounter any issues, GoDaddy support and various online communities are great resources for additional help. Happy securing!