SSL on Flywheel
How SSL certificates work on Flywheel, how to check your certificate status, and what to do if you see a security warning.
Flywheel provides a free SSL certificate for every site. SSL is what lets your site use https:// instead of http://, so browsers don't flag it as "Not secure". On Flywheel, the certificate renews itself once it's set up.
How SSL works on Flywheel
When your site is set up on Flywheel with a custom domain:
- Once your domain's DNS points to Flywheel, Simple SSL is switched on for that domain from the site's Flywheel dashboard. We do this for you.
- Flywheel gets a free certificate from Let's Encrypt, installs it, and emails you when the domain is secured.
- Turning on Force HTTPS in the site's Advanced tab then sends all traffic to the
https://version. - The certificate renews automatically before it expires. Let's Encrypt says its default certificates are valid for 90 days, so this matters.
Once it's set up, you don't need to do anything to keep it working. It's managed for you.
Checking your SSL status
To verify SSL is active on your Flywheel site:
Log in to Flywheel, click Sites, and open your site.
Find the Domains card on the site's Overview tab.
Check the SSL Status column. It shows the certificate type for each domain that has one, or "Not Enabled" for a domain that doesn't. The SSL Certificates card on the same tab lists every certificate installed on the site.
You can also open your website in a browser and look for:
https://at the start of the URL- No "Not secure" warning in the address bar
- A site-information icon at the left of the address bar: a padlock in some browsers, a different symbol in others
What to do if you see a security warning
If your browser shows "Not secure" or another security warning on your Flywheel site, common causes include:
- SSL certificate not yet set upThis can happen right after a domain is added to Flywheel. SSL has to be switched on for the domain, and its DNS needs to point to Flywheel first.
- Mixed contentSome elements on the page (images, scripts) are still loading over
http://instead ofhttps://. - Expired certificateRare with Flywheel's free certificates since renewal is automatic, but worth checking. A certificate bought from another company has to be renewed separately.
Contact us if you see any security warnings and we'll diagnose and fix the issue.
Adding SSL to a new domain
If you've recently connected a new domain to Flywheel, SSL needs to be switched on for it:
Open the site's Overview tab and find the domain on the Domains card.
Check its SSL Status. If it already shows a certificate type, there's nothing to do. If setup was started recently, give it up to an hour to finish.
If not, open the three-dot menu next to the domain and choose Add SSL Certificate. Choose Simple SSL if asked, tick the domains you want to secure, and click Complete SSL Setup.
Every domain you tick has to have its DNS pointed at the Flywheel site's IP address, or the certificate will fail for that domain. See how DNS & hosting fit together.
Common questions
Does SSL cost extra on Flywheel?
No. Flywheel's Simple SSL certificate is free on every Flywheel plan.
Do I need to renew my SSL certificate?
Not if you use Flywheel's free Simple SSL certificate. Flywheel renews it automatically, so you'll never need to do this manually.
My site has https but there's still a warning, what's happening?
This is likely a mixed-content issue: some elements on the page are loading over HTTP. This is a WordPress or plugin configuration issue that we can fix. Let us know and we'll resolve it.
How long does it take for SSL to activate on a new domain?
Once DNS is pointing correctly to Flywheel, Flywheel's help docs say setup usually takes from a few minutes to about an hour, and Flywheel emails you when it's done. If DNS was only just changed, it can take longer while the change spreads.
Related guides
Learn more
Was this page helpful?
Go deeper on chykalophia.com
- Our full guideWebsite maintenance: costs and risksWhat upkeep costs, and what goes wrong without it.
- Website careThe Boring StuffOur care plan: updates, backups, security and speed, looked after for you.
- Our approachWebsite optimizationTesting, performance work and analytics hygiene that keep your site earning.
Need a hand?
Stuck? We'll help.
Email us with your website address and a screenshot if you can, and we’ll take it from there.
Last updated