How to setup Cloudflare flexible SSL Certificate for WordPress 

Posted by on

Share this

If you want to migrate your WordPress site from HTTP to HTTPS, then you require an SSL Certificate. Now it has become necessary for WordPress bloggers to secure their sites using SSL Encryption. Cloudflare offers flexible & free SSL Certificate for small websites which is easy to implement. HTTPS, on the other hand, helps in encrypting all transmitted data and thus protect it from getting hacked by any external host or network. In this post, I will be sharing the complete guide to Setup Cloudflare Flexible SSL Certificate for WordPress.

In case you don’t know a bit about SSL certificates, you might enjoy reading this article >> All That You Should Know About SSL Certificates.

Now I’m going to answer a question that many of our readers asked us this month, do SSL Certificate affects Search Engine Rankings?

Yes! Now Google is counting HTTPS as a Search Engine Ranking Factor. It means that if you are using HTTPS on your WordPress blog, then your website will be considered as a safe to use (by Google), and thus it will increase your chances of ranking high in search results.

Years ago, SSL certificates were too expensive to buy even for bloggers, but now it has become feasible due to Cloudflare’s free services. Years ago, SSL certificates were too expensive to buy even for bloggers, but now it has become feasible due to Cloudflare’s free services. If you want to spend some bucks in order to make your website more secure and safe, you can try out other authorized SSL Certificate providers at reasonable prices. You are free to use Cloudflare’s flexible SSL Certificate on your WordPress site or blog. It requires small modifications to your WordPress site settings which are quite simple.

How to Setup Cloudflare Flexible SSL Certificate for WordPress?

Cloudflare is an American based company which provides a content delivery network (CDN), Internet security services and distributed domain name server services. Here at 3nions, we are using Cloudflare CDN and DDoS protection services.

To start using the Cloudflare Flexible SSL Certificate on WordPress, firstly, you need to create a free account on Cloudflare. It is very easy to set up and activate Cloudflare services on your WordPress site. Just follow the steps given below:

  • Sign up on Cloudflare and enter the essential details.
  • Now add a new website and click on scan button. It will automatically scan and grasp all your domain records.
  • Select a free website option.
  • Now Cloudflare will provide you two different Name Servers which you have to enter it in the place of your existing name servers.
  • For that, just login into your web hosting/domain account and open “Manage DNS” option. Under that, you will find Name servers.
  • Change the existing Name Servers with those provided by the Cloudflare. That’s it. Now Cloudflare will take some time to verify your website.
  • After the verification process is completed, you are ready to add Cloudflare Flexible SSL Certificate on your WordPress site. Now open the “Crypto” option from the row of icons in your Cloudflare’s dashboard.

Setup Cloudflare Flexible SSL Certificate for WordPress

  • Under Crypto, you will find the SSL Certificate option. Select the Flexible SSL from the drop-down menu. Cloudflare usually takes around 15 minutes to issue a Flexible SSL certificate for your domain name.
  • After some time you will get your Cloudflare Flexible SSL certificate activated. You can ensure that by locating the green badge of “ACTIVE CERTIFICATE” under the SSL Certificate option. Refer the screenshot above for more information.

Read this: How To Create a Free CloudFlare Account For Your WordPress Blog?

Setting up WordPress for Cloudflare Flexible SSL Certificate

NOTE: Before making any changes in your WordPress dashboard, Don’t change your site address from HTTP to HTTPS, otherwise, you will crash your site.

For activating HTTPS on your WordPress site, Cloudflare requires the installation of two plugins. Without installing these plugins, the Cloudflare flexible SSL Certificate won’t work on your WordPress site.

Cloudflare Flexible SSL WordPress Plugin

cloudflare flexible ssl wordpress plugin

This plugin is crucial for enabling Cloudflare flexible SSL Certificate on your WordPress site. It helps in fixing the infinite redirect loops when loading WordPress websites under CloudFlare’s Flexible SSL system.

This plugin don’t require any settings. Just install and activate it from your WordPress dashboard.

Download this plugin

WordPress HTTPS (SSL) Plugin

WordPress HTTPS (SSL) Plugin

WordPress HTTPS (SSL) Plugin is the best SSL plugin for WordPress. Not only Cloudflare, but any SSL certificate can be easily integrated into your WordPress site using this plugin. Any other details about the plugin installation would be found here. This plugin will force WordPress to use HTTPS on all the links and pages of your website.

Download this plugin

WordPress HTTPS (SSL) Plugin Installation and Configuration Settings

  1. Install the plugin from WordPress Dashboard > Plugins > Add new.
  2. Go to HTTPS from your WordPress main menu.
  3. In HTTPS settings, please select the “Yes” option for proxy settings and leave the other options as it is.
  4. After that just hit the “Save Changes” button.  For more information, refer to the screenshot given below.

WordPress HTTPS (Cloudflare SSL) Plugin Installation and Configuration

Setting up Cloudflare to address HTTPS on all the web pages.

Now you are just one step away for adding Cloudflare flexible SSL on your WordPress site. Login into your Cloudflare account and go to Page rules from the row of icons.

Page Rules let you control which Cloudflare settings trigger on a given URL. So here you have to add a new Page rule which will let you enable HTTPS on your WordPress site.

  1. Login into your Cloudflare account and go to “Page Rules”.
  2. Now Click on “Create Page Rule”. Cloudflare offers only three Page Rules per website in a free account.
  3. Enter your Site URL as a Page rule between two *–* asterisks. For example, http://*www.3nions.com*. If your site address doesn’t have a “www”, then write it without “www”.
  4. In settings, turn on “Always use HTTPS”.
  5. Keep the trigger order as “First”.
  6. Now save the Page Rule by clicking on “Save and Deploy” button. Refer the screenshot below for reference.

Changing your WordPress Site Address (URL) from HTTP to HTTPS

It is the final step in which you have to change your WordPress Site Address (URL) to start using HTTPS on your site.

  1. Go to your WordPress General Settings.
  2. Now you have to change your Site address from “http://” to “https://” to start using Cloudflare flexible SSL in WordPress. Please do not attempt to change the WordPress Address (URL) and leave it as “http://”. See the image below for reference.

NOTE: Do not make any changes to your Site Address (URL) before installing and activating the Cloudflare Flexible SSL WordPress Plugin. Otherwise, it will break your site. If you change your WordPress Address (URL) to “https://”, it will crash your site, and it won’t work. 

If you’re still getting problems while setting up Cloudflare flexible SSL Certificate in your WordPress site then you must watch this video by my buddy Vashistha Kapoor.

Closure 

  • If your WordPress site is taking sensitive data from visitors like bank transfer, online purchase, email registration or login, adding SSL certificate is critical.
  • Currently, SSL Certificate or HTTPS is not much affecting the SEO of your Site, but maybe later it is possible that it will become one of the major ranking signals of Google.
  • SSL will keep your site secured, not only for you but also for your visitors.

Related Posts:

Have you made a transfer to HTTPS? Let us know the biggest challenges you encountered while doing it? Have any questions in your mind? Feel free to ask in the comment section.

Like this post? If yes, then don’t forget to share it with your friends on Facebook, Twitter, and Google Plus!

Last updated: April 10, 2017

Authored by :

I'm 3nions's co-founder and an individual contributor to the team. Besides being a Web Enthusiast, My latest obsession is SEO. When I'm not playing with CSS3 or Adobe Illustrator, I love adventuring nature and eating.

9 comments

G. P. Gautam

Hello, Prakhar.

As you mentioned in this post SSL is becoming vital for blogs. And it is a good way to touch our readers heart. It cares us!

I have a blog named TutorialPandit (if you allow) where I provide tutorials in Hindi language.

I heard about Free HTTPS by cloudflare. And I also try to use this on my blog. But, when it tells me to replace nameservers I stop immediately.

Now please tell me when we change our nameservers with cloudflare’s nameservers who host our blog? Is this cloudflare (as I thought) or it won’t change?

Thank you.

When you Enter your details while adding a new website, Cloudflare automatically grabs your domain records and point it to your hosting. Cloudflare just acts as a bridge between your site and your users. You can change your name servers without worrying about it. It will not affect anything.

Thank you for interacting.
Keep visiting.

Regards,
~Prakhar Shrivastav.

Saurabh tiwari

Thanks Prakhar, This is quick and handy 🙂

“I was excited to see this article. I followed the steps and set it up my site is now on Flexible SSL

Thank you.

Hi, Saurabh.

Happy to hear that you have successfully settled up Cloudflare flexible SSL Certificate in your WordPress site. Congratulations!

Browse safe, rank good!

Thank you for communicating.

Regards,
Prakhar.

Robin Khokhar

Hello Prakhar,
It is a great help indeed. Using the Https for free is excellent. I am going to try them on my sites.
Thanks for your help and sharing this fantastic post.
Have a good week ahead.

Thanks Robin.
Glad to hear that this post helped you. It is important to secure the data exchange between you and your visitors, that’s what is the main function of HTTPS or SSL Certificate. Now it has become one of the SEO factors of Google. And thus putting it on your website is a good idea to increase your site security as well as ranking. Wish you all the best.

Regards,
~Prakhar.

Thanks for writing this, I am leaving a comment and I’ll share it as well. I know there are so many of us that were bewildered by doing this. Your steps are clear and concise. I don’t have time to do just now because I have to prepare for a meeting but I’m going to follow your steps and recommendations tomorrow!

Vashishtha Kapoor

Hi Prakhar and team 3nions
Thanks for adding my video to your blog. I am glad that I helped many using this video.

While adding a page rule can definitely help in redirecting all the traffic to https one but you can also force your site to always use https with the help of this video also. https://www.youtube.com/watch?v=irKHKCPpD9A

Would be glad if you add this too right after that section.

SwapnilKharche

Hi Prakhar,

Thanks for your post. I have a doubt here. Which SSL certificate is better – Bluehost or cloudflare. Because one of my site is on bluehost and also they give free SSL certificate. So, which one is best free certificate for long time?

~Swapnil Kharche

Leave a Reply