What HTTPS protects

TLS (often still called SSL) encrypts information between a browser and the website endpoint, helping protect traffic from eavesdropping and tampering along the network path. A certificate also helps the browser verify the identity of the destination it is connecting to.

What SSL does not protect

An SSL certificate cannot stop a vulnerable WordPress plugin, weak administrator password or malicious file upload from compromising your site. You still need updates, least-privilege access, tested backups and good application security.

How to enable it

If your hosting includes managed SSL, connect the domain to the right server and follow the provider's certificate activation instructions. Certificates require domain verification. If the browser still reports an error, confirm DNS, expiry and whether all required hostnames are covered.

Avoid mixed content

A secure page can still load an image, script or stylesheet over HTTP. Browsers may block these resources or display a warning. Update absolute URLs and test major pages after enabling HTTPS.

Simple checks after activation

  • Open the website with https://.
  • Confirm the browser shows a secure connection without a certificate warning.
  • Test both the root and www hostname if you use them.
  • Check that HTTP visits redirect to the intended HTTPS address.
  • Confirm certificate renewal arrangements with your host.

Free SSL comes with Estha web hosting. Review web hosting plans and the launch checklist for other essentials.