SSL on Flywheel
How SSL certificates work on Flywheel, how to check your certificate status, and what to do if you see a security warning.
Flywheel provides a free SSL certificate for every site. SSL is what lets your site use https:// instead of http://, so browsers don't flag it as "Not secure". On Flywheel, the certificate renews itself once it's set up.
Quick summary
Flywheel provides free SSL certificates (it calls them Simple SSL). Once a certificate is set up for your domain, Flywheel renews it automatically, so you don't need to do anything to maintain it. If you see a "Not secure" warning, there may be a configuration issue that we can fix quickly.
How SSL works on Flywheel
When your site is set up on Flywheel with a custom domain:
- Once your domain's DNS points to Flywheel, Simple SSL is switched on for that domain from the site's Flywheel dashboard. We do this for you.
- Flywheel gets a free certificate from Let's Encrypt, installs it, and emails you when the domain is secured.
- Turning on Force HTTPS in the site's Advanced tab then sends all traffic to the
https://version. - The certificate renews automatically before it expires. Let's Encrypt says its default certificates are valid for 90 days, so this matters.
Once it's set up, you don't need to do anything to keep it working. It's managed for you.
Checking your SSL status
To verify SSL is active on your Flywheel site:
Log in to Flywheel, click Sites, and open your site.
Find the Domains card on the site's Overview tab.
Check the SSL Status column. It shows the certificate type for each domain that has one, or "Not Enabled" for a domain that doesn't. The SSL Certificates card on the same tab lists every certificate installed on the site.
You can also open your website in a browser and look for:
https://at the start of the URL- No "Not secure" warning in the address bar
- A site-information icon at the left of the address bar — a padlock in some browsers, a different symbol in others
What to do if you see a security warning
If your browser shows "Not secure" or another security warning on your Flywheel site, common causes include:
- SSL certificate not yet set up — this can happen right after a domain is added to Flywheel. SSL has to be switched on for the domain, and its DNS needs to point to Flywheel first.
- Mixed content — some elements on the page (images, scripts) are still loading over
http://instead ofhttps://. - Expired certificate — rare with Flywheel's free certificates since renewal is automatic, but worth checking. A certificate bought from another company has to be renewed separately.
Contact us if you see any security warnings and we'll diagnose and fix the issue.
Adding SSL to a new domain
If you've recently connected a new domain to Flywheel, SSL needs to be switched on for it:
Open the site's Overview tab and find the domain on the Domains card.
Check its SSL Status. If it already shows a certificate type, there's nothing to do. If setup was started recently, give it up to an hour to finish.
If not, open the three-dot menu next to the domain and choose Add SSL Certificate. Choose Simple SSL if asked, tick the domains you want to secure, and click Complete SSL Setup.
Every domain you tick has to have its DNS pointed at the Flywheel site's IP address, or the certificate will fail for that domain. See how DNS & hosting fit together.
Common questions
Does SSL cost extra on Flywheel?
No. Flywheel's Simple SSL certificate is free on every Flywheel plan.
Do I need to renew my SSL certificate?
Not if you use Flywheel's free Simple SSL certificate. Flywheel renews it automatically, so you'll never need to do this manually.
My site has https but there's still a warning — what's happening?
This is likely a mixed-content issue — some elements on the page are loading over HTTP. This is a WordPress or plugin configuration issue that we can fix. Let us know and we'll resolve it.
How long does it take for SSL to activate on a new domain?
Once DNS is pointing correctly to Flywheel, Flywheel's help docs say setup usually takes from a few minutes to about an hour, and Flywheel emails you when it's done. If DNS was only just changed, it can take longer while the change spreads.
Related guides
- What is SSL & HTTPS?
- The Flywheel dashboard explained
- How DNS & hosting fit together
- SSL on WP Engine
- SSL on Kinsta
Need a hand?
Learn more
Last updated