What Is SSL and Why Do You Need It?

SSL (Secure Sockets Layer) — now replaced by TLS — encrypts communication between your website and your visitors. When SSL is active, your site loads using https:// instead of http://.

Why it matters:

• Protects passwords & sensitive data
• Prevents hackers from reading traffic
• Shows trusted ???? padlock in browser
• Required for secure payment pages
• Required to stop "Not Secure" warnings
• Improves Google SEO ranking

⚠ Without SSL, modern browsers will show “Connection Not Secure” warnings and users may avoid your site.

 Does Nairahost Provide Free SSL?

Yes — all shared hosting packages include FREE automatic SSL from Let’s Encrypt.

Even our basic plans include unlimited free SSL certificates.

Nameservers Required for Auto SSL

• cPanel hosting:

  ns1.nairahost.cloud
  ns2.nairahost.cloud

• DirectAdmin hosting:

  ns1.nairahost.com.ng
  ns2.nairahost.com.ng
  
   SSL installation will fail if your domain is not pointed correctly to Nairahost nameservers or A records.

    Step-by-Step: Install SSL in cPanel

1. Login to cPanel from your Nairahost client area
2. Search for “SSL/TLS Status”
3. Find your domain in the list
4. Click Run AutoSSL or Enable AutoSSL
5. Wait for the green padlock icon to appear

 The installation usually completes in under 5 minutes.

  Step-by-Step: Install SSL in DirectAdmin

1. Login to DirectAdmin panel
2. Go to SSL Certificates
3. Select “Free & automatic certificate from Let’s Encrypt”
4. Check “Force HTTPS” if available
5. Click Save

▶ How to Force HTTPS (Very Important)

Installing the SSL certificate is only half the job — you MUST force all visitors to use HTTPS, or they will still be able to load the insecure version.

Option 1: Automatic Redirect in cPanel

• Open Domains menu
• Toggle the “Force HTTPS Redirect” button

Option 2: Using .htaccess (Works for ANY website)

Paste this inside your .htaccess file:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    

⚠ If you paste it incorrectly, your website may show redirect loops. Place only once at the top of the file.

 How to Enable HTTPS in WordPress

Method 1 – WordPress Settings

1. Go to Settings → General
2. Change both URLs to https://yourdomain.com

Method 2 – Plugin (Beginner Friendly)

Install Really Simple SSL and click Activate.

Method 3 – wp-config.php (Permanent)

define('FORCE_SSL_ADMIN', true);
    

 How to Test If SSL Is Working

Use these tools:

• https://whynopadlock.com
• https://www.ssllabs.com/ssltest/
• https://www.redirect-checker.org/

⚠️ Common SSL Errors & How to Fix Them

Error: “Not Secure” even after enabling SSL

Cause: Mixed content — images or scripts still loading over HTTP.

Fix: Run “Fix insecure links” in Really Simple SSL or update URLs in the database.

Error: Too many redirects

Cause: Multiple HTTPS redirects stacked

Fix: Only apply redirect in ONE place (either cPanel or .htaccess — not both)

Error: SSL not installing at all

Possible causes:

• Wrong nameservers
• CNAME conflicts
• Cloudflare misconfiguration
• Domain not propagated

Fix: Wait for DNS to propagate and retry AutoSSL

 BONUS: Enable HSTS Security Header

HSTS forces browsers to ALWAYS connect securely:

Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
    

⚙️ Only enable HSTS after your SSL is working perfectly — you cannot undo it quickly.

 Final SSL Security Checklist

• SSL installed successfully in Nairahost panel
• HTTPS redirect enabled
• WordPress URL updated
• No mixed content errors
• Padlock visible in browser
• HSTS enabled (optional advanced)
• SSL renewal schedule confirmed