Secure your WordPress website with HTTPS

So you bought your piece of "online real state", in other words, domain name and got yourself professional web hosting. 

You are ready to build your website. So I can install WordPress right?

Wait, did you think about the security of your website? You need to secure your WordPress website with HTTPS.

Securing your website what does that mean?

HTTP or HTTPS

Casual users rarely notice them, but HTTP (or, http://) and HTTPS (https://) are both options for the start of a URL, showcasing an important difference in all those web pages you visit on a daily basis.

If neither of these is present then most likely, it’s http:// Let’s find out the difference…

Fair warning! Some geek talk is coming your way.

HTTP

HyperText Transfer Protocol (HTTP is a protocol using which hypertext is transferred over the Web. Due to its simplicity, HTTP has been the most widely used protocol for data transfer over the web but the data (i.e. hypertext) exchanged using HTTP isn’t as secure as we would like it to be. In fact, hyper-text exchanged using HTTP goes as plain text i.e. anyone between the browser and server can read it relatively easy if one intercepts this exchange of data.

HTTPS

You might have noticed that as soon as we click on the check-out on these online shopping portals like Amazon, the address bar gets changed to use https. This is done so that the subsequent data transfer (i.e. financial transaction etc.) is made secure. And that’s why https was introduced so that a secure session is a setup first between Server and Browser.

Cryptographic protocols such as SSL turn http into https i.e. https = http + cryptographic protocols.

How do I get that S?

HTTPS needs SSL Certificates

SSL, what does it mean?

SSL Certificates are small data files that digitally bind a cryptographic key to an organization’s details. When installed on a web server, it activates the padlock and the https protocol and allows secure connections from a web server to a browser. 

Typically, SSL is used to secure credit card transactions, data transfer, and logins, and more recently it has become the norm.

How do I get an SSL certificate?

Most (if not all) professional web hosting companies offer an SSL certificate for free to secure your website.

Am I ready now to build my website?

In short, no.

The long answer is: you still need to defend your website from hackers with a plugin like Wordfence or Sucuri.

Also, you should have an antivirus program on your computer. 

This helps protect your computer against most viruses, worms, Trojan horses, and other unwanted invaders that can make your computer "sick." 

Viruses, worms, and the like often perform malicious acts, such as deleting files, accessing personal data, or using your computer to attack other computers.

All the best,

Luc

If you find this article informative, do share it with your friends and/or leave a comment/question below