Free SSL Certificate (Encryption Everywhere)
BigCommerce offers a free SSL certificate, Encryption Everywhere, for stores on any plan. This allows any store with a custom domain name instant access to a free, dedicated SSL certificate.
Another benefit of having a dedicated SSL on your store is the ability to use our Sitewide HTTPS feature which will encrypt all pages of the website. Having sitewide HTTPS will display a green padlock on all pages, giving shoppers extra confidence in your brand and can improve your SEO ranking in Google.
- Your store must have a custom domain. The domain name can be pointed via A Record, C Name or nameservers, but we recommend nameservers if at all possible.
- Ensure your account information is up to date such as Country, State, and Organization Name.
- Your domain name, organization name, or address must not contain a Symantec protected keyword (e.g. Ford, Amazon, Apple).
If you are unsure about meeting these requirements, feel free to reach out to our support team for further investigation.
Applying the Free SSL Certificate
If you have met the requirements, the free SSL certificate will apply automatically after the store has a custom domain applied. No further action is required. Note that the new SSL certificate may take some time to propagate. It can take up to 48 hours before it is fully applied.
The free SSL certificate can be enabled manually in the event it does not automatically apply. See BigCommerce SSL Certificate to learn how.
How do I renew Encryption Everywhere?
No action is required. BigCommerce automatically installs a free SSL certificate once the previous SSL has expired.
What happens if my current paid SSL certificate expires?
If you have purchased an SSL certificate and it expires, BigCommerce will automatically install an Encryption Everywhere certificate, so the store is always protected. If the SSL has not applied after 48 hours, please reach out to our support team for further investigation.
What happened to the shared SSL certificate?
The shared SSL certificate will continue to protect stores without a custom domain (e.g. mybcstore.mybigcommerce.com)
Stores with a custom domain applied before May 24, 2017, but without a dedicated SSL certificate will continue to use shared SSL certificate. These stores can opt in to the free SSL certificate at any time. Once a store has applied Encryption Everywhere, it cannot go back to using the shared SSL certificate with that custom domain.
What's the difference between the free and paid certificates?
The Quick SSL, Quick SSL Premium, and True BusinessID SSL certificates offer features that the free option does not. These include things like:
- a site seal
- purchase protection / warranty
- extended validation (EV)
Why don't I see a padlock on every page?
By default, the free SSL certificate is only applied to pages that require the security such as checkout, account and cart pages. To have the SSL applied to all pages of the store, see Sitewide HTTPS.