Activate the free SSL certificate

Every domain hosted at Upkyo gets a free SSL certificate, renewed automatically. This guide is for anyone who wants the padlock to appear next to their website address, whether it is a business site, an online store or a WordPress blog.

An SSL certificate (also called a TLS certificate) encrypts the traffic between the visitor's browser and your website. Without it, browsers show "Not secure" next to the address, which drives some visitors away and hurts your search rankings.

Before you start

• Your domain name must point to your Upkyo hosting. If you have just changed your DNS, wait until the change is visible, see Why is my DNS change not visible yet?.
• The certificate covers the domain shown in your hosting. If you also use the www address, make sure it points to the same place, see Edit your DNS records.
• There is nothing to buy: the certificate is included.

Check or activate the certificate step by step

1. Log in to your client area at upkyo.com.
2. Open My services and click your hosting.
3. Click SSL.
4. If the domain is marked not secure, click Install to get the free certificate.
5. Turn on Redirect HTTP to HTTPS so that all visitors land on the secure version.
6. Open your website in a private browsing window and check that the padlock appears.

What does an SSL certificate do?

The certificate has three jobs:

• Encrypt: passwords, contact forms and payments no longer travel across the network in plain text.
• Authenticate: the browser checks that the website really belongs to the domain shown.
• Reassure: visitors now expect the padlock and an https:// address.

Google has used HTTPS as a ranking signal for years. Modern browsers also block some features (geolocation, notifications, payments) on insecure websites.

Why turn on the HTTP to HTTPS redirect?

Installing the certificate makes your website available over https://, but the old http:// address can stay active. Visitors, old links and bookmarks would keep reaching the unencrypted version.

The redirect automatically sends every visitor to the secure version. It also stops Google from indexing two versions of each page, which would split your rankings.

Is renewal automatic?

Yes. The free certificate is renewed automatically before it expires. You have nothing to do as long as your domain keeps pointing to your Upkyo hosting.

If you move your DNS elsewhere, renewal can fail, because the certificate issuer must be able to confirm that the domain points to your hosting.

What if the padlock does not appear?

• The domain does not point to Upkyo yet: the certificate cannot be issued. Check your DNS, then click Install again.
• The padlock is missing or crossed out despite the certificate: your page is probably loading images or scripts over http://. This is mixed content, see Switch your website to HTTPS and fix mixed content.
• Your browser keeps the old version: clear the cache or test in a private window.
• The message mentions a certificate that is valid for another name: you may be visiting the www address while the certificate was issued without it, or the other way round. Check that both addresses point to your hosting.

Good habits after activation

• Replace http:// with https:// in your website address inside your CMS (WordPress, for example).
• Update your links on social networks, in your email signatures and in your analytics tools.
• If you use Google Search Console, add the https:// version of your website.

Frequently asked questions

Is the SSL certificate really free at Upkyo?

Yes. Every domain hosted at Upkyo gets a free SSL certificate. There is no installation fee and no renewal fee.

How long does it take for HTTPS to work?

The certificate can be installed as soon as the domain points to your hosting. If you have just changed your DNS, you first need to wait until the change is visible everywhere, see Why is my DNS change not visible yet?.

Is a free certificate as secure as a paid one?

For encryption, yes: the protection of the traffic is the same. Paid certificates mainly add a deeper check of the company's identity, which some industries require, but they make no difference to the padlock shown.

Why does my website still say "Not secure"?

Either the certificate is not installed yet, the HTTPS redirect is not turned on, or the page contains mixed content. Follow the steps above, then the guide Switch your website to HTTPS and fix mixed content.

Do I need to do anything when the certificate expires?

No, it is renewed automatically. You can check its expiry date at any time on your domain's page. If a problem persists, open a ticket from /submitticket.php.