SSL, HTTPS, and WooCommerce

This document gives an overview of the Secure Sockets Layer (SSL) and Hypertext Transfer Protocol Secure (HTTPS), explaining their importance for securing your WooCommerce store. You’ll learn how to set up a free or paid SSL certificate on your site, and why they are essential for protecting customer data and boosting trust.

Our aim with this guide is to assist you in ensuring a secure and reliable shopping experience for your users.

Additionally, we cover WooCommerce’s Force SSL setting and share troubleshooting tips for common SSL issues. In many cases, it’s best to work with your host or a developer to get SSL working.

Secure Sockets Layer (SSL) is a protocol used on the web for:

• Encrypting website data sent from the browser to the server (and vice versa) to protect it.
• Authenticating your site to assure visitors that your identity is verified.

SSL creates a secure connection between two machines or devices over the web or an internal network, safeguarding sensitive data, and allowing it to be privately transmitted.

Hypertext Transfer Protocol Secure (HTTPS) is the secure version of HTTP, the protocol over which data is sent between a browser and a website.

An SSL certificate is issued after verifying a website’s authenticity and the identity of its owner., as indicated by the https:// prefix in the site’s URL, alongside a padlock icon.

Most payment gateways require SSL; we strongly recommend it. Customers visiting your store see it as a sign of trustworthiness. They expect to see https:// and the padlock icon in the address bar when browsing, buying, and entering their account and payment details.

SSL is necessary whenever customer information needs to be transmitted securely. You need to use it if:

• You are accepting/transmitting sensitive information — such as addresses and credit card numbers — and need to keep them safe.
• You want to secure logins and signups on your site.
• You need to comply with privacy and security requirements.
• You want users to trust your website.
• You want customers to buy from your online store.

Websites using SSL are also said to rank higher with search engines and load faster.

To use SSL on your website, you must obtain an SSL certificate. There are both free and paid options available.

We love this initiative! Let’s Encrypt is a certificate authority (CA) providing free SSL certificates for a more secure, privacy-focused internet. Learn more about Let’s Encrypt and see how it works.

There are two ways to get a free SSL certificate from Let’s Encrypt.

1. Select a hosting company with free SSL

Our WooCommerce hosting partners offer free SSL certificates that can be installed in a few minutes. Often, no installation is required when you purchase a web domain with a hosting package.

Ask your hosting company if they offer a free SSL certificate from Let’s Encrypt, and follow their instructions. If they do not, you can choose to install one yourself.

2. Install it yourself

If your hosting company does not include a click-and-install tool but offers the option to self-install a free SSL certificate, you can still use Let’s Encrypt.

Some third-party providers sell a range of SSL certificates that you install on your site. Your hosting company may also sell SSL certificates, which they can help install on a new or existing site.

For low-cost options, see: Where can I get an affordable SSL certificate?

Once the certificate is set up on your server, you can access your store via https://yoursite.com (replacing yoursite.com with your domain). Your browser should also display a padlock icon in the address bar to indicate that it is secured. Alternatively, in Google Chrome, the information may be visible by clicking the gears icon in the address bar.