/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Auto-Install Free SSL – Generate & Install Free SSL Certificates

Auto-Install Free SSL – Generate & Install Free SSL Certificates

By Anindya Sundar Mandal

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Auto-Install Free SSL – Generate & Install Free SSL Certificates Review - In-Depth Analysis

Generate and install Free SSL Certificates for WordPress with ease. This plugin offers HTTPS redirect and automatic renewal reminders.

Performance Overview

WPS Score

7.04/10

User Rating

4.9/5 (based on 405+ reviews)

Active Installations

8,000+

Update Frequency

Average It is calculated using the weighted average of same category plugins.

Security Score

6.1 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

Auto-Install Free SSL allows you to generate Free SSL Certificates directly from your WordPress dashboard. It simplifies the process of securing your website without the need for programming skills.

This plugin utilizes Let’s Encrypt™ SSL Certificates, which are free and easy to install. With just a few clicks, you can secure your website and ensure your visitors' data is protected.

The plugin offers features such as domain ownership verification, automatic renewal reminders, and one-click HTTPS redirection. It is designed for users who want a hassle-free solution for SSL installation.

Comparing to Alternatives

Auto-Install Free SSL offers a robust solution for generating and installing free SSL certificates, standing out among several notable alternatives in the WordPress ecosystem.

Top alternatives

Strengths

Highly rated with a 4.9 average from over 400 reviews
Easy to use for users familiar with uploading files to servers
Responsive support with quick bug fixes
Free option available with essential SSL generation and installation features
Trusted by users for seamless integration and cost savings

Weaknesses

Has known security vulnerabilities in older versions requiring updates
May require some technical knowledge for manual installation
Premium features require upgrading to pro version
Security risk score indicates moderate risk history

User Sentiment Analysis

With a 97.3% 5-star rating and overwhelmingly positive user feedback, this plugin is highly regarded for its ease of use and effectiveness in generating free SSL certificates.

Positive highlights

'Great plugin and very useful.' — Digitalain
'Excellent Service... saved me lots of money!' — swinnow13
'Bug fixed and released within ONE HOUR of my report' — dandrewtech
'Forget GoDaddy! Go with Auto-Install Free SSL' — globalgirlssquad710
'Finally Got My Free SSL Working (When Nothing Else Would)' — skeeterseatery

Common complaints

Weaknesses

Requires manual file upload knowledge for some users
Security vulnerabilities were found in older versions
Pro version needed for advanced features
Moderate security risk score

Who Should Use This?

Best for

Users who want a reliable, free SSL certificate solution and have some technical knowledge to handle manual installation or server file uploads.

Not ideal for

Users seeking a fully automated SSL installation without technical involvement or those concerned about using plugins with a history of security vulnerabilities without timely updates.

Pricing & Value

Free version includes

The free version allows users to generate private keys and SSL certificates and manually install them, providing essential SSL functionality at no cost.

Pro version

Offers premium features such as automated installation, enhanced support, and additional SSL management tools.

Final Verdict

Auto-Install Free SSL is a highly rated plugin that delivers effective free SSL certificate generation and installation, praised for its ease of use and responsive support. It stands out among alternatives for users comfortable with some technical steps and looking to save costs.

However, users should be aware of its security history and the need for manual installation in the free version. Those requiring fully automated solutions or with strict security concerns may want to consider other options or ensure they keep the plugin updated.

Other Notable Features

Here are a few other notable features of this free Auto-Install Free SSL – Generate & Install Free SSL Certificates plugin.

Free SSL

Free SSL Certificate

HTTPS Redirect

Screenshots

FAQ

Please click here to learn about plugin installation.

This is a temporary issue. You may wait 24 hours or follow these steps:

Please access your website with HTTPS (e.g., https://example.com). If you are sure that the SSL certificate is installed correctly and the padlock is visible, please log in to your WordPress dashboard, open a new tab, write the following URL in the address bar by replacing ‘www.example.com’ with your domain name, and hit enter:

  http://www.example.com/wp-admin/admin.php?page=aifs_force_https&aifsaction=aifs_force_https_override&checked_ssl_manually=done&valid_ssl_installed=yes

Let’s Encrypt™ does not issue SSL certificates for localhost. Let’s Encrypt™ certificates are intended for public domain names, which are accessible via the internet for the domain control validation (DCV) process. Since localhost is a local server and a hostname used for development, it is not publicly accessible and cannot be validated online using the HTTP-01 challenge (the most common method).

After you complete developing the website in the local development environment, please do the following to secure your website with a free SSL certificate:

Use an existing web hosting server or hire a new one that is publicly accessible, i.e., available online.
Use an existing domain name or purchase a new domain name.
Associate the domain name with the IP address or nameservers of the online web hosting server, i.e., set A records or NS records.
Migrate the website from your local development environment to the online web hosting server using a Migration and Backup Plugin, like ‘Duplicator’.
If the domain name mentioned in steps 2 and 3 is different from your local hostname, replace it with the new domain name across all database tables using a plugin like ‘Better Search Replace’.

Rest assured, after you complete the above steps, you can easily generate an SSL certificate with this plugin, i.e., ‘Auto-Install Free SSL’. We’ve made the process as straightforward as possible for your peace of mind.

However, if you use a registered domain name (for your WordPress website), mapped to the localhost IP address (e.g., 127.0.0.1), and use the DNS-01 challenge for the domain control validation (DCV), our plugin will create a free SSL certificate for your registered domain name. Then you can download the SSL certificate files from our plugin’s ‘Generate SSL’ page and manually install them on the local server. In that case, we recommend you map the registered domain name to the localhost IP address (e.g., 127.0.0.1) using your local computer’s host file, but don’t set A records pointing to the localhost IP with your domain registrar. Use your domain registrar only to set TXT records for the DNS-01 challenge. Please read this for more information: https://letsencrypt.org/docs/certificates-for-localhost

Let’s Encrypt™ issues free SSL certificates only after successful domain control validation (DCV).

Let’s Encrypt™ HTTP-01 challenge works by creating a specific text file with specific content in a specified directory (.well-known/acme-challenge/) of the document root of the website, as defined by the ACME standard. The file name and its content are variable. Our plugin creates this file with the specific text by automatically communicating with the Let’s Encrypt™ API server, and as per their requirements. Users of the free version can download the static file and upload it to the specified directory. The premium plugin uploads this file to the specified directory automatically.

It’s the responsibility of your web server to make the static file available at the specific public URL. This is the standard behavior of every web server. To validate your domain control, Let’s Encrypt™ API server accesses the specific URL and checks if the file’s content is valid. For example, the file at the following URL:

http://yourdomain.com/.well-known/acme-challenge/pqv-gjW9kF0VjktRxdqpPNK-0tLA_n5ORCzuB71-Zog

Must return this exact content or text:

pqv-gjW9kF0VjktRxdqpPNK-0tLA_n5ORCzuB71-Zog.aSOSwUGmotjVbnE_hY1u-2wwHhwyl5qtPLVr4COOSQs

If your web server (or hosting provider) purposefully blocks access to such files, Let’s Encrypt™ cannot validate that you control the domain, and will not issue an SSL certificate for your domain name.

Please contact your web hosting provider and ask whether they allow Let’s Encrypt™ API access to HTTP-01 challenge files.

Optionally, follow these steps: create two directories (i.e., folders) ‘.well-known/acme-challenge/’ in the document root of your domain name or website. Create a static file with the following file name:

pqv-gjW9kF0VjktRxdqpPNK-0tLA_n5ORCzuB71-Zog

and without any file extension inside the ‘.well-known/acme-challenge/’ folder. Copy the following content into the file and save it:

pqv-gjW9kF0VjktRxdqpPNK-0tLA_n5ORCzuB71-Zog.aSOSwUGmotjVbnE_hY1u-2wwHhwyl5qtPLVr4COOSQs

Then try to access it over HTTP like the following URL:

http://yourdomain.com/.well-known/acme-challenge/pqv-gjW9kF0VjktRxdqpPNK-0tLA_n5ORCzuB71-Zog

(Make sure to replace ‘yourdomain.com’ with your actual domain name.) If you can see the exact file content in your browser, your server is ready.

However, some hosts allow you to view the file manually in a browser but block Let’s Encrypt™ API from accessing it, which also causes failures. So, the best way is to ask your web hosting provider.

This is a temporary issue. You may wait 24 hours or follow these steps:

  http://www.example.com/wp-admin/admin.php?page=aifs_force_https&aifsaction=aifs_force_https_override&checked_ssl_manually=done&valid_ssl_installed=yes