SSL setup

HTTPS is non-negotiable

Every site must run on HTTPS. Without SSL, browsers show a "Not Secure" warning and Google de-ranks the site.

Platforms that handle SSL automatically

• Vercel, Netlify, Webflow, Wix, SquarespaceSSL provisioned instantly on domain connect.
• Cloudflarefree SSL via their proxy layer, applies to any site behind it.

When you need to install manually

• cPanel hosting (SiteGround, Hostinger, etc.)go to cPanel → SSL/TLS → install Let's Encrypt (free) via their built-in tool or AutoSSL.
• Older hostsmay require manual certificate upload from a provider like ZeroSSL.

How to verify SSL is working

• Visit the site at `https://yoursite.com` (not `http://`).
• Look for the padlock icon in the browser address bar.
• Use SSL Checker for a detailed report.

Let's Encrypt vs. paid certs

For most client sites, Let's Encrypt (free, auto-renews every 90 days) is perfectly sufficient. Paid certs (DigiCert, Comodo) are only needed for specific enterprise or compliance requirements — you won't need them for typical CMS builds.