Get started

Set up encrypted connections for your domain by choosing a certificate, selecting an encryption mode, and enforcing HTTPS.

Before you begin

• Create an account and register an application

Choose an edge certificate

Edge certificates are the SSL/TLS certificates that Cloudflare presents to visitors connecting to your domain. Cloudflare offers several types:

• Universal certificates:
• Advanced certificates:
• Custom certificates:
• Keyless certificates (Enterprise only):

For help deciding which certificate type fits your use case, refer to Edge certificates.

:::note[For SaaS providers]

For more details, refer to Cloudflare for SaaS (managed hostnames).

:::

Choose your encryption mode

Once you have chosen your edge certificate, choose an encryption mode.

Encryption modes control how Cloudflare manages two separate connections: one between visitors and Cloudflare, and another between Cloudflare and your origin server. Modes range from no encryption to strict validation of your origin certificate. For more context, refer to the concepts page.

Full (strict) mode — the most secure option — requires a valid, unexpired certificate on your origin server. You can use a certificate from a publicly trusted certificate authority (CA), or generate a free Origin CA certificate from Cloudflare. Each encryption mode page lists its specific requirements.

Enforce HTTPS connections

SEO considerations

Using HTTPS can improve user trust and may be used as a ranking signal by search engines. For related guidance, refer to Improve SEO.

Optional - Enable additional features