Really Simple SSL (Now Really Simple Security): WordPress Security The Easy Way

Running a website can be a bit like hosting a haunted-house party: invite people to a kooky mansion, and no one shows up (poltergeists notwithstanding). To make it a success, you need to provide a safe, welcoming environment for your guests.

And that’s essentially what Really Simple Security — the plugin you probably still know by its old name, Really Simple SSL — does for your site.

This super-popular WordPress plugin still makes it easy for website owners to upgrade to HTTPS — and since its September 2024 rename (version 9), it bundles a full set of free security tools on top. Upgrading helps maintain visitor security, and it signals to search engines that your site is the hottest ticket in town. Sounds great, doesn’t it?

In this quick guide, we’ll take a look at what Really Simple Security can do, what changed with the rename, how to install the plugin, and some of the alternatives to consider. Let’s get the party started!

What Is SSL Exactly?

Secure Sockets Layer, or SSL, is basically the secret handshake of the internet. It’s a cryptographic protocol that ensures that hosting servers and web browsers can talk to each other without any uninvited creeps eavesdropping on the conversation.

On a more technical level, SSL works like this:

• When you visit a website, the hosting server “shakes hands” with your web browser.
• The browser then asks the server for an ID.
• In response to incoming requests, the server produces a valid certificate to prove its identity.
• After the certificate has been checked, the server and browser open a secure connection via HTTPS.
• Once the connection is established, all data that’s transferred between the server and the browser is encrypted.

This process ensures that sneaky hackers can’t set up a fake server or spy on your connection to steal any personal information. Plus, search engines tend to prefer sites that are secure in this way.

Fun fact: SSL was replaced a few years ago by TLS (Transport Layer Security). However, because TLS performs the same function, we generally talk about SSL.

What Is Really Simple Security (Formerly Really Simple SSL)?

Really Simple Security (formerly Really Simple SSL) is a WordPress plugin that configures HTTPS and hardens your site. The free version installs an SSL certificate, redirects traffic to HTTPS, detects vulnerable plugins and themes, adds two-factor authentication and login protection, and applies core hardening — all from a guided setup wizard.

Quick history for anyone confused by the two names: the plugin was renamed from Really Simple SSL to Really Simple Security in September 2024 with version 9, when its free feature set grew from SSL setup into a broader security toolkit. Same plugin, same listing on WordPress.org — bigger job description.

More specifically, the plugin installs a free SSL certificate, if required, and configures your site to use HTTPS. (With many of our DreamHost hosting plans, we do this for you.)

In addition to the initial set-up process, Really Simple Security can run a security health check on your hosting server and help you mitigate WordPress’s weaknesses.

It can even notify you about vulnerabilities that pop up in the plugin, theme, and WordPress core updates.

Why Really Simple Security Is Probably Your Best Option

What makes Really Simple Security the standout choice? There are five main reasons:

1. It’s the simplest solution: This plugin lives up to its name. There are multiple ways to set up SSL and HTTPS, but none are as easy and straightforward as using Really Simple Security.
2. Intelligent automation: When you set up HTTPS manually, there’s always a chance of introducing the occasional typo. Really Simple Security helps you avoid this issue by automating much of the process. The automation also extends to troubleshooting mixed content errors and other common issues that arise when you implement SSL/HTTPS.
3. SSL-first, security second: Many full-featured security plugins include SSL setup as an option. Really Simple Security comes at it from the other direction: it nails the WordPress HTTPS migration first, then layers on hardening, login protection, and vulnerability alerts as you need them.
4. Streamlined performance: While sprawling security plugins sometimes add weight to your site, Really Simple Security stays deliberately lean: SSL and redirects run with minimal overhead, and you only switch on the heavier security modules if you want them.
5. Outstanding reviews: Really Simple Security holds a 4.9-star average rating from more than 8,800 reviews in the official WordPress Plugin Directory (as of July 2026), and the support team is quick to respond in the plugin’s forum.

These features are pretty compelling, aren’t they? With more than 3 million active installations (per WordPress.org, July 2026), plenty of site owners agree.

Really Simple Security Use Cases

Not sure whether you need an SSL plugin? To make the answer crystal clear, let’s run through the main use cases for Really Simple Security:

• New WordPress sites: If you’re starting from scratch, Really Simple Security can help you make your site secure. The plugin ensures HTTPS is properly configured, helping you to avoid common pitfalls.
• Upgrading existing sites to HTTPS: If your existing site doesn’t yet run SSL/HTTPS, you should probably upgrade for improved security and SEO benefits. Really Simple Security automates the transition, so content like images and links are loaded properly via the secure HTTPS protocol.
• Sites with mixed HTTP/HTTPS content: Some WordPress sites end up with an ugly mixture of HTTPS and HTTP content because of site migrations, plugin conflicts, or manual HTTPS setups. This can create security vulnerabilities and even break your site. Luckily, Really Simple Security has a mixed content fixer.
• Subdomains that need HTTPS: Maintaining HTTPS across multiple subsites or subdomains can be complicated. Really Simple Security supports multisite installations — the free plugin is multisite-compatible, and a dedicated Pro Multisite plugin ships with the Agency license — so subsites are configured to use HTTPS automatically.

How To Set Up Really Simple Security

Assuming your site falls into one of these categories above, you should install Really Simple Security. Here’s your jargon-free quickstart guide:

1. Install The Plugin

To get started, log in to your WordPress Dashboard and navigate to Plugins > Add New Plugin via the side menu.

Next, search for really simple ssl in the search box in the top-right (the old name still works and finds the renamed plugin). This is the one you’re looking for — it now appears as Really Simple Security:

Heads up: the screenshots in this guide show the plugin’s previous “Really Simple SSL” branding. The flow works the same today, but you’ll see the new name throughout, and settings now live under a dedicated Security menu.

Tap Install Now, and then Activate.

2. Basic Configuration

Once Really Simple Security is activated, its setup wizard launches automatically and scans your site configuration.

Most web hosts today, including DreamHost, provide SSL certificates. If this applies to your hosting plan, you can simply walk through the setup process:

If the wizard doesn’t open on its own, look for the new Security item the plugin adds to your lefthand navigation menu and select Security > Settings.

Optionally, pick your web host from the hosting-provider dropdown at the top of the wizard — it tailors the instructions to your host.

Then click the blue Activate SSL button in the setup wizard.

Choose whether you want Really Simple Security’s additional hardening features. When you’re done, click Enable (or you can choose to Skip at this time).

Now, enter your email address (you need to complete email verification to access certain options).

Choose whether you want to install the optional security and privacy plugins.

Complete the process by clicking Finish.

And just like that, you’re done! Your website should now be secure with HTTPS — we’ll verify it properly in the next step.

Setting Up An SSL Certificate

Unfortunately, not all web hosting providers give you SSL as a standard feature. But fear not, dear friend! Really Simple Security allows you to generate a free certificate via Let’s Encrypt.

Here’s how to do it:

1. After the initial scan, Really Simple Security will inform you that “No SSL certificate has been detected.” Click on Install SSL Certificate.
2. The plugin will dive deeper to check whether your site is ready for SSL. Assuming you meet the criteria, you can click Save and Continue.
3. To register your SSL certificate, the plugin will then ask you for a contact email address and a few other details. Fill these out, and then click Save and Continue.
4. Next, the plugin will ask you to add information about your hosting management software (e.g., cPanel). Fill out the form, and smash that Save and Continue button.
5. In some cases, you might be asked to verify your DNS records. The wizard will guide you through any steps you need to take.
6. Really Simple Security will generate your SSL certificate. It might install automatically. Otherwise, follow the steps provided by the wizard to install your certificate manually.

Et voilà! You should be ready to transition to SSL.

Keep in mind that some hosts don’t allow you to generate and install SSL certificates so easily. If you’re encountering problems along the way, check this list to see if your host supports Really Simple Security.

3. Security Checkup

Once you’ve completed the installation process, it’s worth checking that SSL is working properly. 
Start by typing in the URL of your website, with https:// at the beginning. Then click on the View site information icon to the immediate left of the address bar.

Click Connection is secure and you should see a “Connection is secure” message.

If you encounter problems here, it might be because of mixed content errors.

All good? Next, open the plugin’s dashboard under Security > Dashboard in your admin sidebar. Here, you can run a quick SSL health check.

While you’re there, you can also check for any security issues in the vulnerabilities overview on the plugin’s Security dashboard.

Follow the instructions here to fortify your site!

Really Simple Security Alternatives

As you can tell, we love Really Simple Security. There are other options, though. Here are some of the key alternatives:

• Cloudflare: This CDN (content delivery network) comes with basic SSL capabilities — just avoid its legacy “Flexible” SSL mode, which leaves the connection between Cloudflare and your server unencrypted. Use Full (Strict).
• Manual installation: For advanced users who want total control, configuring SSL manually might be a better option.
• Other WordPress SSL plugins: Plugins like SSL Zen and WP Encryption offer extra features, such as email reminders for expiring SSL certificates.

Really Simple Security FAQs

Still have questions? We have answers! Here are the questions we hear most about Really Simple Security:

Is Really Simple Security free?

Yes — SSL setup, hardening, vulnerability detection, login protection, and two-factor authentication are all free. Pro adds a firewall, automated vulnerability remediation (auto-update and quarantine), security headers, and premium support.

Does Really Simple Security slow down my website?

No. This particular plugin is really lightweight. But remember, the encryption of SSL does take a little time.

Will Really Simple Security break my site?

It shouldn’t. But it’s worth backing up your site before you install the plugin. If you have problems, try clearing your browser cache, and make sure you don’t have conflicting redirect rules in your .htaccess file.

Is Really Simple SSL the same as Really Simple Security?

Yes. The plugin was renamed with version 9 in September 2024, when it grew from an SSL helper into a full security plugin. It keeps the same listing on WordPress.org, and existing installs update normally.

Is Really Simple Security safe after the 2024 security flaw?

Yes. The authentication-bypass flaw found in November 2024 (CVE-2024-10924) was patched within days in version 9.1.2, and the plugin is actively maintained. Keep automatic updates on — sound advice for any security plugin.

Make WordPress More Secure

Adding SSL to your site is highly recommended, and Really Simple Security makes it super easy. With the right hosting provider, you can upgrade your site in minutes.

At DreamHost, all our web hosting plans come with SSL certificates. On some plans, like DreamPress, you don’t even need to install the certificate!

We also offer free daily site backups, a 100% uptime guarantee, and 24/7 expert support.

Want to try it for yourself? Sign up today to give your WordPress site the hosting it deserves!