Guide to the Simplest Cloudflare SSL Installation

Website security is an indispensable factor in today's digital era. Installing SSL (Secure Sockets Layer) helps encrypt data transmitted between users and the server, increasing trust with Google and customers. In this article,VPTSwill guide you on how to install free SSL via Cloudflare simply and quickly.

Buy VPS at VPTS

What is Cloudflare SSL?

Definition:Cloudflare SSL is an SSL/TLS certificate service provided by Cloudflare that helps secure data transmitted between browsers and web servers by encrypting information. This helps prevent third parties from stealing or spoofing data when users access websites.

See more:Cloudflare SSL is a security service that encrypts the connection between users and the web server via Cloudflare's CDN (Content Delivery Network). The goals are:

• Protects transmitted data from theft or tampering.

• Accelerate page load speeds with Cloudflare's global server network.

• Block DDoS attacks and malicious bots with built-in protection layers.

What is SSL?

SSL (Secure Sockets Layer) is a security protocol that encrypts data transmitted between a user's browser and a website's server. The primary purpose of SSL is to protect personal information and sensitive data from being stolen, intercepted, or tampered with during transmission across the internet.

How SSL certificates work

SSL works by encrypting data transmitted between the browser (client) and web server (server), helping protect data from eavesdropping, theft, or tampering.

• Client requests a secure connection (HTTPS)

• Server sends SSL certificate

• Browser checks certificate

• Initialize secure connection 

• Start transmitting encrypted data

How to add a domain and point it to Cloudflare

STEP 1: Create an account and add domain to Cloudflare

• Sign up or log in to a Cloudflare account

• Click“Add a domain”on the main interface, enter your domain name (e.g.:tenmiencuaban.com) and click“Continue”

STEP 2: Select a service plan

• Cloudflare will ask you to select a service plan.

• Select the Free plan if you do not need advanced features → click Continue.

STEP 3: Configure DNS

• Cloudflare will automatically scan existing DNS records (if any). You should double-check them

• Add or edit if necessary. Then, click Save.

STEP 4: Point domain to Cloudflare by changing Nameservers

• Cloudflare will provide 2 nameservers

• You need to access the domain management page where you purchased the domain (at VPTS)

• Locate Nameservers or DNS Management, then replace the 2 old nameservers with the nameservers provided by Cloudflare.

STEP 5: Wait for confirmation from Cloudflare

• After successfully pointing NS, return to Cloudflare → click“Done, check nameservers”

• Wait about 5 minutes to 24 hours; once successful, Cloudflare will display the “Active” status.

Types of Cloudflare SSL

You can use a similar format to present Cloudflare's SSL types as follows:

Flexible SSL: This is Cloudflare's most commonly used free SSL type. With Flexible SSL, you do not need to install an SSL certificate on the server. Data is only encrypted between the browser and Cloudflare, not between Cloudflare and the server – presenting a risk if someone intercepts traffic between Cloudflare and the origin server.

Full SSL: Requires your server to have SSL installed (even a self-signed SSL). Data is fully encrypted from browser → Cloudflare → server. However, trust depends on the certificate on the server (if not from a trusted CA, you can still use it, but not at the highest security level).

Full (Strict) SSL: Highest security level. The server must have a valid SSL certificate issued by a trusted CA (such as Let’s Encrypt, Sectigo...). Data is fully encrypted and the certificate is verified.

Enable Flexible SSL

To quickly enable an SSL certificate for your website without server-side configuration, you can use Cloudflare's Flexible SSL – simple, free, and deployable in minutes.

Step 1: Log in to Cloudflare

Accesshttps://dash.cloudflare.comand log in to your account.

Step 2: Select the domain that needs SSL activation

After logging in, select the domain you added to Cloudflare from the management list.

Step 3: Access SSL configuration section

In the domain management interface, go to the SSL/TLS section (formerly the "Crypto" tab)—where you can configure all settings related to SSL security certificates.

Step 4: Select SSL mode as Flexible

Under “SSL/TLS encryption mode”, you will see the modes: Off, Flexible, Full, Full (Strict).
Select Flexible to encrypt data between users and Cloudflare. 

Note: Connection from Cloudflare to the server is still HTTP (unencrypted).

Step 5: Save configuration

After selecting Flexible, click Save or Apply to save the changes. SSL will be activated within a few minutes.

Step 6: Finally, don't forget to check and verify once more to ensure that SSL has been activated.

How to install SSL on Cloudflare

Cloudflare provides 3 main types of SSL:

• Flexible:Encryption between browser and Cloudflare, no need to install SSL on origin server.

• Full:Encryption between browser → Cloudflare → origin server (server must have an SSL certificate).

• Full (strict):Similar to Full, but requires a valid certificate on the server&reliable.

To install Flexible SSL, follow the instructions below

Step 1: Add website to Cloudflare

• Accesshttps://dash.cloudflare.com

• Log in to account → select“Add a Site”to add the domain.

• Point DNS to Cloudflare (requires update at your domain registrar)

• Enable Proxy (orange cloud icon) to activate protection features.

Step 2: Go to the "SSL/TLS" section

• In the domain management page, select the SSL/TLS tab from the left menu bar.

Step 3: Select "Flexible" in the Overview section

• In the domain management page, select the SSL/TLS tab from the left menu bar.

• Under Your SSL/TLS encryption mode, select Flexible.

• Flexible mode encrypts connections from the user → Cloudflare.

• Cloudflare connects back to your server using HTTP (does not require SSL on the server side).

Step 4: Save settings

Notes when using Flexible SSL:

• Should not be used for login or payment pages, as server-side security is unencrypted.

• If SSL is installed on the origin server, select Full or Full (strict) for comprehensive protection.

How to install Cloudflare Full SSL certificate

Step 1: Access Cloudflare account

• Should not be used for login or payment pages, as server-side security is unencrypted.

Step 2: Check the SSL certificate on the server

• From the domain management page, navigate to SSL/TLS, then select Overview to configure settings related to your domain's SSL certificate.

Step 3: Configure SSL on Cloudflare

• Go to SSL/TLS tab → select Overview.

• In the SSL/TLS section>In Overview, you will see SSL encryption mode options. Select Full

Step 4: Create or integrate Origin SSL Certificate from Cloudflare

On the Cloudflare interface, you will see the Origin Certificates or Origin Server Certificate section, depending on the displayed version. Here, Cloudflare allows users to obtain free SSL certificates; you can generate a new certificate or use an existing one to integrate into your web server.

Step 5: Complete the process

After selecting the appropriate SSL certificate type, click Save or Apply to apply the changes. Finally, you should visit the website again to verify that the certificate is properly installed and functioning.

CONCLUSION

Thus, through the detailed guide steps above, you can easily install and activate Cloudflare SSL for your website. Using SSL not only encrypts data and builds user trust, but also contributes to better search engine SEO rankings.

CompanyVPTSalways encourages customers to use HTTPS to ensure safety for both websites and visitors. If you encounter any difficulties during SSL installation or need technical assistance, do not hesitate to contact our support team.

VPTS – Comprehensive Digital Infrastructure Solutions Provider

VPTS Team Contact Information