Flash Sale:75% Off Hosting + Free DomainEnds in13h47m14sView Plans
Hostvento logoHostvento
Get Started

How to Use SSL with Cloudflare

This guide shows how to turn on safe HTTPS for your site when you use Cloudflare. Ask Hostvento support if Cloudflare is available on your plan.

Domains and DNS2 min read9 steps

What are SSL and Cloudflare?

SSL is a lock for your website. It scrambles the data between a visitor and your site. Sites with SSL show a padlock and start with https. Cloudflare is a free-to-start service that sits in front of your site. It speeds it up and protects it. It can also give your visitors an SSL lock.

There are two links to protect. One is visitor to Cloudflare. The other is Cloudflare to your hosting server. You set how strict the second link is with an SSL mode.

Steps

  1. Log in to your Cloudflare account and add your domain.
  2. Cloudflare shows you two name servers. Name servers tell the internet where your domain's DNS is.
  3. Log in to your client area. Open Domains, then My Domains.
  4. Open the nameserver settings for your domain.
  5. Replace the old name servers with Cloudflare's two. Save.
  6. Wait for Cloudflare to show your domain as active. It can take a few hours.
  7. In Cloudflare, open the SSL/TLS menu.
  8. Pick an encryption mode (see below).
  9. Open Edge Certificates. Turn on Always Use HTTPS.
Warning: Changing name servers can break email. Copy your DNS records first. Check Cloudflare has all of them.

Which SSL mode?

  • Flexible. Visitor to Cloudflare is locked. Cloudflare to your server is not. This is the weakest choice.
  • Full. Both links are locked. Your server can use a self-signed certificate.
  • Full (strict). Both links are locked and your server needs a valid certificate. This is the best choice.

To use Full (strict), install a valid SSL on your hosting account first. Ask support what is available on your plan.

Fixing a redirect loop

If your site says "too many redirects", you may be on Flexible mode while your server forces https. Switch to Full or Full (strict). Then reload.

Mixed content

If the padlock is missing, some images or files still load with http. Change those links to https.

Tip: Still stuck? Open a support ticket and say which SSL mode you picked.

Quick recap

  • Cloudflare sits in front of your site and can give you SSL.
  • Point your name servers to Cloudflare.
  • Choose Full (strict) when your server has a valid certificate.
  • Turn on Always Use HTTPS.