Easy Tech TutsHow to Enable Cloudflare SSL, Install & Use SSL Certificate Easily 2026
By Impran M N
Cloudflare provides a free SSL certificate for every domain, but choosing the correct encryption mode is key to avoiding redirect loops. This guide covers activating SSL, generating an origin certificate for your host, and enforcing HTTPS across your site.
01Open the SSL/TLS Overview
Select your domain and navigate to the SSL/TLS Overview tab to check your current security status.
02Choose your encryption mode
Select Flexible, Full, or Full (Strict) based on your hosting setup, with Full (Strict) recommended for maximum end-to-end security.
03Generate an Origin CA certificate
Go to Origin Server settings and generate a free Cloudflare Origin certificate to install on your backend host.
04Install the certificate on your host
Paste the cryptographic key files into your web host's SSL settings, such as Nginx, Apache, or cPanel.
05Enforce HTTPS site-wide
In Edge Certificates, turn on 'Always Use HTTPS' and 'Automatic HTTPS Rewrites' to eliminate mixed content errors.
Frequently asked questions
Why do I get a redirect loop after enabling SSL?
Redirect loops usually happen when the encryption mode doesn't match your host's actual SSL setup; switching to Full or Full (Strict) instead of Flexible often resolves it.
Is Cloudflare's SSL certificate really free?
Yes, Cloudflare issues a free Universal SSL certificate automatically for domains on its network, including the free plan.
Do I need to install anything on my host if I use Flexible mode?
Flexible mode doesn't require an origin certificate since it only encrypts traffic between the visitor and Cloudflare, not between Cloudflare and your server, though this is less secure overall.
What does Automatic HTTPS Rewrites actually fix?
It rewrites insecure HTTP links in your page's HTML to HTTPS automatically, helping eliminate mixed content warnings in browsers.
Watch the full walkthrough
The same steps, demonstrated on screen from start to finish.
