You always need a secure URL for your website. Secure means your website will be accessible with SSL(Secure Sockets Layer). It’s very important to access your site on HTTPS instant of HTTP. Today I will tell you how you can add ZeroSSL to your website. ZeroSSL is totally free for your website.
ZeroSSL allows the free start of three domains. You can add free-of-cost SSL to your first three sites after those you have to buy if you want to issue SSL for more sites.
Create ZeroSSL account:
In first step you have to create an account on ZeroSSL website. For this go Here.
Here on this page you can see the Get Free SSL button click on that and visit to registration button.
On this page you have to provide some information to signup.
After providing these all press to the Next Step button.
Once you press this button you can see the ZeroSSL dashboard.
Create New SSL Certificate:
Here on Dashboard you can see New Certificate button press this button present in the above image.
On the next page you have to provide following information:
Enter Domain (Enter your domain name for which you want to issue SSL)
You will see this Green ticks for a valid domain name.
2. Validity (For how many time this ssl is valid )
Usually for 90 days its free and if you want for 1 year you have to buy.
3. CSR & Contact
Finalize Your Order (you have to select )
You have limit to issue three free ssl to your domain. Once the process of plan selection done now you have to verify your domain.
ZeroSSL allow three types of verification:
DNS (CNAME) HTTP
You can chose any one you are comfortable with. If you have this email then use it, or update DNS records according to the second or upload the file to dns.
After this you will get a option to download SSL. you can download crteficate.
Add ZeroSSL to your Website?
When you got your SSL file there must be three files after extracting. ca_budle, certificate, private key
Add these files values according to the require mint on your site.
After installation activate this Wordfence security plugin to configure it.
They guide you through these steps and you can follow these but follow another part of this article in order to understand better.
Setup Firewall in Wordfence:
Wordfence Firewall saves your website from malleolus access of the website. The firewall has general real-time security and secures your website from brute force attacks on your website.
The free version of the Firewall of the workforce does most of the things for you but in the premium version, you will get all the advanced features also.
Premium versions include Real-time IP blocklist, Real-time firewall rules, and malware defense.
The firewall has two-level f protection one is basic and the other one is advanced level protection. The basic level of protection covers the threads and attacks on the website but may miss some plugin and themes attacks. Advanced level covers all these.
On the Dashboard page of your Wordfence plugin, you can see the firewall percentage.
To configure your Wordfence firewall go to Wordfence->Firewall option.
Once you click the Optimize The Wordfence Firewall you will see a notice click Continue and you can see your firewall is successfully installed.
You can also see extended mode is enabled. if you check your firewall performance is also increased.
Scan your site from Wordfence:
You can scan your website using the Wordfence security plugin. To scan your website go to the Wordfence->Scan->Start Scan.
After clicking start scan you can see that your site starts scanning and now wordfence goes into the file of your WordPress site.
Basically, wordfence goes into the files of your websites and scans all the files present on your website directory. Note all changes that happen in that file and write those on your screen.
Wordfence tells you that which issue and changes of files are critical, which are ignorable, which files need to delete and which can be ignored.
The scanning process does not go into just one step it complete in a number of steps.