Every Twerple hosting plan includes a free SSL certificate. When is that enough, and when is a paid DV, wildcard or EV certificate worth it?
An SSL certificate is what puts https:// and the padlock in front of your website’s address. It encrypts everything between your visitors and your website, and browsers now warn people away from websites without one. So the question is not whether you need a certificate, but which kind.
What all certificates have in common
Free or paid, a valid certificate encrypts the connection just as strongly. A visitor’s password or card number is equally protected either way. The differences are in how the certificate is checked, what it covers, how long it lasts and what comes with it.
The free certificate
Every Twerple hosting plan includes a free SSL certificate, issued automatically and renewed for you. It proves that the website really belongs to the domain in the address bar. For most websites, including blogs, portfolios and business websites, it is all you need. See Installing a free SSL certificate.
When a paid certificate makes sense
| Type | What is checked | Good for |
|---|---|---|
| Domain Validation (DV) | That you control the domain | Websites that want a certificate from a commercial certificate authority, usually with a warranty |
| Wildcard | That you control the domain | Covering every subdomain, such as shop., app. and mail., with one certificate |
| Extended Validation (EV) | That your organisation is a real, registered company | Banks, payment services and businesses where proving your identity matters most |
Some organisations also need a paid certificate because a partner, a payment provider or an internal policy asks for one.
Our advice
Start with the free certificate. Choose a wildcard when you run many subdomains, and an EV certificate when your customers need to know exactly which company they are dealing with. You can compare our certificates on the SSL certificates page.
Whichever you choose, make sure every visitor is sent to the secure version of your website. See Forcing HTTPS and turning on HSTS.