How to Install an SSL Certificate in cPanel
Installing SSL in cPanel takes 2 minutes: go to SSL/TLS, run AutoFill, then install. For free certificates, use the Let's Encrypt section. Paid certificates require uploading the certificate files.
Installing SSL in cPanel takes 2 minutes. For free certificates use the Let's Encrypt section and click Issue. For paid certificates open SSL/TLS, paste your certificate files and click Install. Then force HTTPS redirect using the Force HTTPS Redirect tool. That is the whole process for most sites.
The SSL/TLS section in cPanel
Everything related to SSL in cPanel lives under the Security section. Look for these three tools:
- SSL/TLS Status — Shows which domains have certificates installed and when they expire. This is the first place to check if you are unsure whether SSL is active.
- SSL/TLS — The main management interface where you install, view and delete certificates. Also where the AutoFill button lives.
- Let's Encrypt SSL — The dedicated section for free auto-renewing certificates provided by Let's Encrypt.
If your host uses AutoSSL (most modern cPanel hosts do), certificates may already be installed without you doing anything. Check SSL/TLS Status first before following these steps. For a general overview of what SSL does, see what is an SSL certificate.
Auto-install method (AutoSSL)
Most cPanel servers now include AutoSSL, which automatically issues and installs Let's Encrypt certificates for every domain on the account. Here is how to trigger it:
- Step 1. Log into cPanel and scroll to the Security section.
- Step 2. Click SSL/TLS Status.
- Step 3. Check the box next to each domain that shows No certificate.
- Step 4. Click Run AutoSSL.
- Step 5. Wait 30-60 seconds. The status should change to Certificate installed.
This method only works if your host has AutoSSL enabled and your domain's DNS resolves to the server. If AutoSSL fails, proceed to one of the manual methods below.
Manual install for paid certificates
If you purchased a paid SSL certificate (from a provider like Comodo, DigiCert or GlobalSign), you need to install it manually. Your certificate provider will send you three files:
- Certificate file (.crt) — The main certificate for your domain.
- Private key (.key) — Generated when you created the CSR. If you lost it, you need to reissue the certificate.
- CA bundle / Intermediate certificate (.cabundle) — The chain of trust linking your certificate to a root authority.
To install:
- Step 1. In cPanel, click SSL/TLS under Security.
- Step 2. Click Install and Manage SSL for your site (HTTPS).
- Step 3. Click the Browse Certificates button or paste the certificate content directly.
- Step 4. Paste your Private Key in the key field and the CA Bundle in the appropriate field.
- Step 5. Click Install. The page should show a success message.
After installation, use the Force HTTPS Redirect tool in cPanel (under Domain section) to redirect all HTTP traffic to HTTPS automatically.
Let's Encrypt installation
Let's Encrypt is the most popular way to install SSL in cPanel for free. Certificates are valid for 90 days and renew automatically if cPanel's AutoSSL cron job is active.
- Step 1. In cPanel, scroll to the Security section and click Let's Encrypt SSL.
- Step 2. Select the domain from the dropdown.
- Step 3. Optionally check the box to include www and non-www versions.
- Step 4. Click Issue. The process takes 10-30 seconds.
- Step 5. Return to SSL/TLS Status to confirm the certificate is installed.
Let's Encrypt certificates are identical in encryption strength to paid certificates. The only difference is validation level — Let's Encrypt only does Domain Validation (DV), not Organisation (OV) or Extended Validation (EV).
Verifying your installation
After installing, verify the certificate is working correctly:
- Visit your site with https:// — Check for the padlock icon in the browser address bar.
- Use an SSL checker tool — Tools like SSL Labs or SSL Checker scan your certificate and report chain completeness, expiry date and configuration issues.
- Check your SSL/TLS Status in cPanel — Confirm the domain shows Certificate installed.
- Test the HTTPS redirect — Visit the HTTP version of your site (http://yourdomain.com) and verify it redirects to https://yourdomain.com.
If the padlock does not appear, the most common cause is mixed content — some resources (images, scripts, stylesheets) are still loading over HTTP. Use a browser's developer tools to identify mixed content warnings.
Troubleshooting common issues
| Issue | Likely cause | Fix |
|---|---|---|
| AutoSSL fails | Domain DNS does not point to this server | Check DNS A record points to the server IP |
| Certificate not trusted | Intermediate certificate missing | Paste the CA bundle content and reinstall |
| Padlock shows warning | Mixed content on the page | Find and fix HTTP resources in the page source |
| Certificate expired | AutoSSL cron not running | Run AutoSSL manually or check with your host |
| Wrong domain on cert | Certificate issued for non-www but site uses www | Reissue the certificate including both www and non-www |
If you still have issues, contact your hosting provider's support team. Most hosts can install SSL for you or check why AutoSSL is failing. For security best practices, read our guide on how to secure a WordPress site.
Frequently asked questions
No. Let's Encrypt provides free certificates that are cryptographically identical to paid ones. Paid certificates (BD 30-100/year) offer organisation validation or extended validation, which displays your company name in the browser bar.
Common causes: the certificate is installed for the wrong domain, the private key does not match, or the intermediate certificate is missing. Check the certificate path and domain name in cPanel's SSL/TLS section.
Propagation is instant for most cPanel servers. If your site still shows as not secure, clear your browser cache, or wait up to 30 minutes for any server-level caching to clear.
Yes, but the method depends on your hosting setup. Some managed WordPress hosts provide SSL through their dashboard. For self-managed servers without cPanel, you need SSH access to install the certificate manually.
SSL is the certificate that encrypts data. HTTPS is the secure protocol that uses that certificate. Installing SSL enables HTTPS on your site. The terms are often used interchangeably but they are not the same thing.