SSL on WP Engine
How SSL certificates are managed on WP Engine, how to check your certificate status, and what to do if you see a security warning.
WP Engine provides free SSL certificates for all sites. SSL ensures your website uses https:// and shows the padlock icon in the browser — essential for visitor trust and search rankings. On WP Engine, SSL is largely managed automatically.
Quick summary
WP Engine automatically issues and renews SSL certificates for sites on custom domains. Certificates are managed through the User Portal. You don't need to do anything to keep them active. If you see a security warning, let us know and we'll investigate.
How SSL works on WP Engine
WP Engine uses SSL certificates from trusted authorities (including Let's Encrypt and DigiCert, depending on the plan and configuration). When your custom domain is properly connected to your WP Engine site:
- WP Engine automatically provisions an SSL certificate.
- The certificate is installed and the site is served over HTTPS.
- HTTP traffic is redirected to HTTPS automatically.
- The certificate is renewed before it expires — no manual action required.
Checking SSL status in the User Portal
Log in to the WP Engine User Portal at my.wpengine.com.
Open your site's Production environment.
Find the SSL section — usually in the site's overview or settings area.
Check the certificate status. It should show as active with a future expiry date.
You can also check quickly in your browser: look for https:// and a padlock in the address bar.
Adding SSL to a new or custom domain
When a new domain is pointed to WP Engine:
Make sure DNS is configured correctly. The domain must be pointing to WP Engine's servers before SSL can be issued. See how DNS & hosting fit together.
Add the domain to your site in the WP Engine User Portal (under the Domains section).
Request or activate SSL for that domain. WP Engine will provision the certificate — this usually takes a few minutes once DNS is configured correctly.
If you see a "Not secure" warning
Common causes on WP Engine sites:
- DNS not fully propagated — the domain may not have fully pointed to WP Engine yet. Wait a few hours and check again.
- Mixed content — some elements (images, scripts) may still load over
http://. This requires a WordPress configuration fix. - Certificate not yet issued — SSL may still be in the process of being provisioned.
Contact us if the issue persists and we'll diagnose it.
Common questions
Related guides
- What is SSL & HTTPS?
- The WP Engine User Portal explained
- How DNS & hosting fit together
- SSL on Flywheel
- SSL on Kinsta
Need a hand?