Most hosts offer free Let's Encrypt certificates: in cPanel open SSL/TLS Status and click Run AutoSSL. After the certificate is active, set your site URL to https:// under General settings, and switch on Force HTTPS under Security and access → Hardening.