How to Install a Free SSL Certificate on cPanel (Let's Encrypt Guide)

If you visit your website and see a "Not Secure" warning in the browser's address bar instead of a padlock icon, your site is missing an SSL certificate. This warning scares visitors away, hurts your Google ranking, and prevents some browsers from even loading your site normally.

The good news: SSL certificates are now free, and installing one on cPanel takes about 3 minutes. This guide shows you how to install a free Let's Encrypt SSL certificate on your SNBD HOST cPanel hosting account.

What Is SSL and Why Does It Matter?

SSL (Secure Sockets Layer) is a technology that encrypts the connection between your visitor's browser and your web server. When SSL is active, your website URL starts with https:// instead of http://, and you see a padlock icon in the address bar.

Here's why it matters for your website:

• Google ranking: Google gives a ranking boost to HTTPS sites and penalizes HTTP-only sites. If your competitor has HTTPS and you don't, you're starting behind.
• Visitor trust: Visitors in Bangladesh, like everywhere else, have learned to look for the padlock. Without it, they hesitate to enter any personal information or complete purchases.
• Required for forms and payments: If your site has any form that collects information (contact form, login, checkout), you need SSL. Without it, the data travels in plain text across the internet.
• Browser warnings: Chrome and Firefox show a large warning page for sites without SSL when a user tries to submit any form. This actively blocks conversions.

What Is Let's Encrypt?

Let's Encrypt is a free, automated Certificate Authority (CA) — an organization that issues SSL certificates. Before Let's Encrypt existed, SSL certificates cost ৳2,000 to ৳15,000+ per year. Let's Encrypt changed everything by offering them at no cost.

Let's Encrypt certificates are trusted by all major browsers and are just as secure as paid certificates for most websites. The only differences with paid certificates are that Let's Encrypt certificates expire every 90 days (though cPanel auto-renews them) and they don't include a warranty or extended validation (the green company name in the address bar that only large organizations typically need).

Step 1: Verify Your Domain Is Pointing to Your Hosting

SSL certificates work by proving that you control the domain. cPanel's auto-installer does this by checking that your domain's DNS points to your hosting server. If your domain isn't pointing to SNBD HOST yet, the SSL installation will fail.

To verify: open a browser, type your domain name, and check whether it loads anything from your hosting account (even a cPanel default page). If it loads, you're good. If it shows a registrar parking page, fix your DNS first (see our DNS guide).

Step 2: Open the SSL/TLS Section in cPanel

1. Log into cPanel (go to yourdomain.com/cpanel or through the SNBD HOST client area)
2. Scroll down to the Security section
3. Look for one of these options (the name varies by cPanel version):
   • SSL/TLS
   • SSL/TLS Status
   • Let's Encrypt SSL
   • AutoSSL

Method A: Using AutoSSL (Recommended — Easiest)

cPanel includes a feature called AutoSSL that automatically installs and renews Let's Encrypt certificates for all domains on your account. If your host has enabled AutoSSL (SNBD HOST does by default), your SSL may already be installed.

1. In cPanel, go to Security → SSL/TLS Status
2. You'll see a list of all domains on your account with their SSL status
3. If the status shows a green checkmark and "Let's Encrypt" or "cPanel-generated," SSL is already installed
4. If the status shows a red X or "Expired," click Run AutoSSL at the top of the page
5. Wait 2-5 minutes while AutoSSL installs or renews the certificate
6. Refresh the page to see the updated status

AutoSSL also runs automatically every few days, so your certificate renews automatically before it expires. You don't need to remember to renew.

Method B: Using the Let's Encrypt Plugin (If Available)

Some cPanel installations have a dedicated "Let's Encrypt SSL" plugin:

1. In cPanel Security section, click Let's Encrypt SSL
2. You'll see a list of your domains
3. Click Issue next to the domain you want to secure
4. Select which subdomains to include (include both yourdomain.com and www.yourdomain.com)
5. Click Issue to start the process
6. Wait about 1-2 minutes. You'll see a success message when done.

Step 3: Force HTTPS (Redirect All Traffic)

Installing the certificate doesn't automatically redirect HTTP visitors to HTTPS. Someone visiting http://yourdomain.com will still see the insecure version unless you set up a redirect.

Option 1: Force HTTPS via cPanel

1. In cPanel, go to Domains → Domains (or look for a "Force HTTPS Redirect" option)
2. Find your domain in the list
3. Toggle on the Force HTTPS Redirect switch
4. Save

Option 2: Force HTTPS via .htaccess

Open File Manager in cPanel, navigate to public_html, and look for a file called .htaccess. If it doesn't exist, create one. Add these lines at the top:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Save the file. Now any visitor going to http:// will be automatically redirected to https://.

Option 3: Force HTTPS in WordPress

If you're using WordPress, install the free plugin Really Simple SSL. After installing and activating it, click the button to activate SSL and it handles the redirect and fixes mixed content issues automatically.

Fixing Mixed Content Warnings

After enabling HTTPS, you might still see a partial padlock or a warning in your browser's developer tools about "mixed content." This happens when your HTTPS page loads some resources (images, scripts, stylesheets) via HTTP.

Common causes and fixes:

• Hardcoded HTTP links in WordPress: Use the plugin "Better Search Replace" to find all http://yourdomain.com in your database and replace with https://yourdomain.com
• WordPress Site URL: Go to Settings → General and make sure both WordPress Address and Site Address start with https://
• Embedded third-party content: If you embed YouTube videos, Google Maps, or other external content using HTTP links, update those to HTTPS links

Checking Your SSL Installation

After installation, verify everything is working:

1. Visit your website — you should see the padlock icon in the address bar
2. Click the padlock — it should show "Connection is secure" and certificate details showing "Let's Encrypt"
3. Try http://yourdomain.com — it should automatically redirect to https://
4. Use the free tool at ssllabs.com/ssltest to run a comprehensive SSL check — aim for an A or A+ rating

Your certificate will automatically renew every 90 days through AutoSSL. You don't need to do anything for renewal. If AutoSSL fails to renew (which can happen if your domain points away from the server), cPanel will send you an email warning before the certificate expires.

SSL is a one-time setup that protects your visitors forever. Every SNBD HOST BDIX hosting plan includes free Let's Encrypt SSL, so there's no additional cost — just activate it through cPanel today.