Certbot: Free Let's Encrypt HTTPS Certificates for Your Server
Certbot · for Linux, macOS and Windows
Developer: Electronic Frontier Foundation (opens in a new tab)
- Linux
- macOS
- Windows
The download link points to the program’s official source; the file is not hosted on this site. Link address: certbot.eff.org
Link not working? Let us know
Certbot is a free, open-source tool from the Electronic Frontier Foundation that obtains HTTPS certificates from Let's Encrypt and keeps renewing them. It runs on Linux, macOS, BSD and Windows; snap is the recommended install method on Linux.
Browsers flag sites without HTTPS, and search engines expect it. Certbot is a command-line tool that switches an existing HTTP site to HTTPS with a free certificate from Let’s Encrypt, then keeps renewing it.
Who needs Certbot
Certbot is for people who run their own server, such as a VPS with Apache or nginx. If your host manages certificates for you, as many shared hosts and control panels do, you probably do not need it.
Getting the right instructions
- The Download button opens certbot.eff.org.
- Choose your web server (Apache, nginx, HAProxy, Plesk and others) and your system. The site generates step-by-step commands for that combination.
- Certbot’s documentation recommends the snap package on most modern Linux distributions that use systemd; pip is another option.
Requirements
- Supported platforms: Linux, macOS, BSD and Windows
- Port 80 must be open so Let’s Encrypt can verify your domain
- Root access is recommended on Linux and BSD, and Administrator access is required on Windows, because Certbot can configure TLS for Apache and nginx automatically
A Docker image exists, but the documentation notes that Docker cannot install the certificate or configure your web server, and advises using it only if you know what you are doing.
Renewal
Certificates from Let’s Encrypt are short-lived; Certbot renews them as needed so your HTTPS keeps working.
You will usually run Certbot over SSH; on Windows, PuTTY is a common client. A web server with built-in automatic HTTPS is Caddy.
Pros
- Free certificates from Let's Encrypt
- Configures Apache and nginx automatically
- Instructions generated for your server and system
Cons
- Command-line only
- Needs root or admin access and an open port 80
Frequently Asked Questions
Does Certbot cost anything?
No. Certbot is free, open-source software from the EFF, and the certificates it obtains from Let's Encrypt are free as well.
Why does Certbot need port 80 open?
Certbot's documentation lists an open port 80 as a requirement; it is used to prove to Let's Encrypt that you control the domain.
CertbotOpen source
Download (opens in a new tab)
