SSL Certificate Setup Without Terminal (2025)

You want HTTPS for your website (that padlock icon in the browser), but terminal commands intimidate you. Good news: you don't need to be a command-line expert to install a free SSL certificate.

This guide shows you multiple ways to get free Let's Encrypt SSL certificates without touching the terminal.

Why You Need SSL (HTTPS)

SSL is a critical security component. Learn more in our complete VPS security basics guide.

• Security: Encrypts data between your website and visitors
• Trust: Browsers mark HTTP sites as "Not Secure"
• SEO: Google ranks HTTPS sites higher
• Requirements: Many features (geolocation, PWA) require HTTPS
• Free: Let's Encrypt provides certificates at no cost

Method 1: Using VPS Commander (Easiest)

If you're using VPS Commander, SSL installation is literally one click. New to VPS Commander? Check our VPS setup guide.

1. Log into VPS Commander
2. Go to Workflows → Security
3. Find "Install SSL Certificate (Let's Encrypt)"
4. Enter your domain name
5. Click Execute

Done. The workflow automatically:

• Installs Certbot
• Configures your web server
• Obtains the certificate
• Sets up auto-renewal

Method 2: Using cPanel (If You Have It)

If your hosting provider offers cPanel, SSL installation is visual and simple:

Step 1: Access cPanel

Log into your cPanel (usually at https://your-domain.com:2083)

Step 2: Find SSL/TLS Section

1. Scroll to the "Security" section
2. Click "SSL/TLS Status"

Step 3: Install AutoSSL

1. Check the box next to your domain
2. Click "Run AutoSSL"
3. Wait 2-3 minutes for completion

Your site should now have HTTPS enabled!

Method 3: Using Cloudflare (Free, No VPS Access Needed)

Cloudflare offers free SSL even if you don't have terminal access to your VPS. This is the easiest method for beginners.

Step 1: Sign up for Cloudflare

1. Go to cloudflare.com
2. Create a free account
3. Add your website

Step 2: Change Nameservers

1. Cloudflare will show you 2 nameservers
2. Log into your domain registrar (GoDaddy, Namecheap, etc.)
3. Replace existing nameservers with Cloudflare's
4. Wait 24-48 hours for DNS propagation

Step 3: Enable SSL

1. In Cloudflare dashboard, go to SSL/TLS
2. Select "Full" or "Full (strict)" mode
3. Enable "Always Use HTTPS"

Cloudflare SSL Modes Explained:

• Flexible: HTTPS between visitor and Cloudflare, HTTP between Cloudflare and your server (least secure)
• Full: HTTPS end-to-end, but your server's certificate can be self-signed
• Full (strict): HTTPS end-to-end with valid certificate on your server (most secure - recommended)

Method 4: Using Web-Based Tools (For Advanced Users)

Some VPS providers offer web-based control panels that can install SSL:

Plesk Panel:

1. Login to Plesk
2. Select your domain
3. Click "SSL/TLS Certificates"
4. Click "Install" next to Let's Encrypt
5. Check "Secure the domain and www subdomain"
6. Click "Get it free"

ISPConfig:

1. Login to ISPConfig
2. Go to Sites → Website
3. Select your website
4. Go to "SSL" tab
5. Check "Let's Encrypt SSL"
6. Click "Save"

Simple Terminal Method (If You Must)

If you're comfortable copying and pasting commands, here's the simplest terminal method using Certbot:

For nginx:

sudo snap install --classic certbot
sudo certbot --nginx -d yourdomain.com -d www.yourdomain.com

For Apache:

sudo snap install --classic certbot
sudo certbot --apache -d yourdomain.com -d www.yourdomain.com

Certbot will ask for your email and automatically configure everything. Just follow the prompts!

Verifying SSL Installation

After installing SSL, verify it's working:

1. Visit https://your-domain.com in your browser
2. Look for the padlock icon in the address bar
3. Click the padlock and check certificate details

Test with SSL Labs:

1. Go to SSL Labs
2. Enter your domain
3. Wait for the test to complete
4. Aim for an A or A+ rating

Troubleshooting Common Issues

Encountering problems? See our common VPS problems guide for additional troubleshooting.

Error: "Domain doesn't point to this server"

Solution: Make sure your domain's A record points to your server's IP address. Check with your domain registrar.

Error: "Port 80 is not accessible"

Solution: Your firewall is blocking port 80. Allow HTTP traffic (port 80) in your firewall settings.

Error: "Too many failed authorizations"

Solution: Let's Encrypt has rate limits. Wait 1 hour before trying again. Make sure your domain is correctly configured first.

Mixed content warnings (padlock with warning)

Solution: Your site loads some resources via HTTP. Update all links to use HTTPS or relative URLs.

Auto-Renewal

Let's Encrypt certificates expire after 90 days. Most installation methods set up auto-renewal automatically.

Test auto-renewal:

If you used Certbot:

sudo certbot renew --dry-run

If you used Cloudflare or cPanel: Auto-renewal is handled automatically - nothing to do!

Force HTTPS (Redirect HTTP to HTTPS)

After installing SSL, redirect all HTTP traffic to HTTPS:

Using VPS Commander:

Workflow → Security → "Force HTTPS Redirect"

Using Cloudflare:

SSL/TLS → Edge Certificates → Enable "Always Use HTTPS"

Using cPanel:

Domains → Force HTTPS Redirect → Enable

Benefits Comparison

Conclusion

You don't need terminal knowledge to install SSL certificates. Here are your options:

• Easiest: Use VPS Commander (one-click workflows)
• Free & easy: Use Cloudflare (bonus: CDN and security)
• If you have cPanel: Use AutoSSL (built-in)
• Willing to copy/paste: Use Certbot (2 commands)

All methods provide the same result: a free, valid, auto-renewing SSL certificate that gives your visitors the green padlock and secures your website.