HTTPS is no longer optional — browsers mark HTTP sites as "Not Secure" and Google ranks them lower.
Auto-SSL (recommended)
Most accounts have AutoSSL enabled — a free certificate is issued automatically within an hour of pointing your domain at the server. Nothing for you to do.
Manual install
- cPanel → SSL/TLS Status.
- You'll see a list of all your domains and their certificate status.
- Tick the domains you want and click Run AutoSSL.
- Within 1–5 minutes, certificates are issued and installed automatically.
Common reasons AutoSSL fails
- Domain not pointed yet — DNS must resolve to our server before a certificate can be issued. Wait for propagation.
- CAA record blocks Let's Encrypt — cPanel → Zone Editor → add a CAA record allowing
letsencrypt.org. - Cloudflare proxying — temporarily turn the orange cloud grey while AutoSSL runs.
Renewal
Let's Encrypt certificates last 90 days. AutoSSL renews them automatically — you never need to touch this again.