Have you ever visited some websites and your browser gives a warning that this website is unsafe? Well, I guess you have.
Often times when I am searching for anything on Google or any search engine, if I bump into any website that is unsafe, I just click away from it and I don’t check on such website again, even if their content is good and of value, did you know why? first impression matters.
When new visitors come to your website the first thing that comes to their mind is, “can this guy answer my question”? And they found the answer to their questions, the other question they ask themselves is, “Is this website a safe one”?
Now, secured or safe websites are better off than unsafe ones. When your website is a safe one, it has a lot of benefits.
WHAT IS A SAFE WEBSITE
A safe website is a website with HTTPS instead of HTTP (the regular one most website owners use). So if you check the URL of your website and you HTTP e.g http://example.com, before semicolon and the backslashes know that your website is an unsafe one.
If you check the URL of this website you will see that there is HTTPS; that shows it is a safe one.
WHAT IS HTTPS
HTTPS means Hypertext Transfer Protocol Secured. It is a medium to secure data and communication over the internet.
With Https it is a lot easier to encrypt useful and personal information like login password, credit card details. It makes a website not to be vulnerable to internet attackers.
WHAT IS AN SSL CERTIFICATE
An SSL certificate (Secured Sockets Layers) is what helps to guarantee the encryption of the information on site. It helps to create a secure link between a website and a visitor’s browser.
The certificate contains different information. It contains a lot of things like entity the certificate was issued for, public key required for encryption and digital signature verification, and a digital signature created with the private key of the certificate issuer.
The important thing is that you need to have installed on your server to have your website secured.
So when you have the SSL certificate installed, your website will now have HTTPS which is the result of the SSL certificate.
Reasons why you need Https for your site
Over the years, various there a lot of misconceptions over why should I switch my website from HTTP to HTTPS.
Read also 7 stupid mistakes bloggers make in blogging
If you check most websites that we all visit almost every day, you will that they don’t lack HTTPS, most websites like Bank website and a lot of popularly known websites like Wikipedia. This shows that there are a lot of goodies tied allocated to websites with HTTPS. What then are the benefits
1. It increases Google rankings
One of the things Google to determine the ranking position on the internet is the availability of SSL certificates on a website. They made this clear to the general public on 06/08/2014 that the SSL certificate installed on your website will boost its ranking position. Ever since then most of the websites on the first page of Google always have an SSL certificate installed on their server.
This ensures easy and safe experience by users. If you have don’t have this certificate on your site, this could your ranking.
2. It builds customers trust
Nobody wants to purchase anything on the internet from an unsecured website. Visitors won’t feel interested in wasting time on unsafe websites.
Even though their blog content is good, 90 percent of them will never come back again; it just doesn’t worth their time, why? You don’t SSL.
The presence of HTTPS on your website provides assurance that one is in safe hands. It makes customers submit their details without the fear of attackers.
3. It makes browsers to declare your site as Safe.
Many browsers display a warning notification to their users when they when connecting to a website without an SSL certificate whether to continue or return to safety.
Many users will just click away from the website upon seeing this notification.
With the SSL installed, all of the data on your site is safe. SSL makes it difficult for hackers to decrypt the encrypted data on your site.
A site must have HTTPS, without it, all of their information will be exposed to attackers. This is one of the reasons why Bank website always has it on its site, in order to protect its customer’s sensitive information.
You have now no why you need to secure your site. So let get straight how to secure a site. For this tutorial, I will be showing you two different ways to secure your site. So you can use any one of the two different methods you are comfortable with.
For the first method, you only need a plugin, but you need to have free SSL in install in your hosting. A lot of web hosting companies offer a free SSL certificate for your web hosting.
So check of you have it in your hosting, before you proceed. If you don’t have it installed for you in your hosting, then you can use the second method.
1. Go to your WordPress dashboard
2. Go to plugin and click on add new
3. Search the plugin called Itheme
4. Install and activate it.
5. And after you, have installed it, you will see a new item in your WordPress menu, click on it.
6. Click on activate brute Force protection
7. Click on close
8. Go to the main settings page.
9. Go to SSL and click on enable
10. Click on configure
11. Select Enable from the drop-down menu. This will redirect your site from Http to Https.
12. Refresh your site. This will log you out, so you need to log back into your site, and your website is now secured.
So if you don’t have the SSL in your site, or you are not sure, you can apply this method.
For this method, we will be using free SSL from another site on our site for free. The website is called Cloudflare.
What’s cloud flare
Cloudflare is a website security company located in America. It was founded in July 2009.
It offers a lot of services that range from website security, domain registration, DNS provision, and a lot more.
According to Wikipedia, it stated that”In March 2013, Cloudflare defended The Spamhaus Project from a DDoS attack “.
So this website has been in service for more than a decade. For the website security which we are going to be working with, there are free and paid plans.
Create an account with Cloudflare
- Go to cloudflare.com and click on signup
- Enter your email and password
Click on create account
Add your website to Cloudflare
Enter your website and click on add site
Click on next
On the next page, select the free plan and then click on confirm
Click on continue. Now your site is added to Cloudflare
Change your nameservers
- After you have clicked on continue, you will need to change your nameservers, by copying the nameservers into your domain
- To add the nameservers to your domain, you need to go to your domain name server(The web company hosting your domain)
- Click on the “I need help changing my nameservers” below the two nameservers
Cloudflare will now scan your website and show you your domain name provider.
So whatever hosting company whether it is Bluehost or anyone, you are hosting with, open a new tab and log into your account with them, do not close the Cloudflare page tab.
After you have logged into the Cpanel account, go to DNS
- Go to nameservers and click on change
- Change it from default to custom to add the new nameservers
- Copy the nameservers from the previous tab and add it to your Cpanel
- After you have done that, go back to the previous tab(the Cloudflare page)
Scroll down and click on “re-check now”
- Refresh the page
Install the Cloudflare plugin on your site.
- Open up a new tab on your browser and log into your WordPress dashboard
- Go to plugin and click on add new
Search for the plugin called Cloudflare Flexible SSL
- Install and activate it.
Enable SSL on Cloudflare
- Go back to Cloudflare
You will see that there are different types of icon arranged horizontally, click on the lock icon among them.
- Scroll down to “always use HTTPS”
Turn it on, and your website will now be secured.
- To check if your site is now secured, you need to go back to the site and refresh it, and you now see the lock icon on your URL. That’s it for this post, remember to share this.