What HTTPS means
HTTPS protects logins, forms and payments from being read or altered in transit. Browsers flag non-HTTPS pages as not secure, and Google treats HTTPS as a ranking signal. Every page of a business site should use it.
Why it matters for your website
Browsers mark HTTP sites as not secure, which scares visitors away from forms and checkouts. Google has said HTTPS is a ranking signal, and many modern browser features require it. With free certificates widely available, there is little reason to skip it.
Example
A tax preparer's site still loads on HTTP, and Chrome shows a not secure warning on the contact form. After moving to HTTPS, the warning disappears.
Tips
- Redirect every HTTP URL to its HTTPS version with permanent redirects.
- Set certificates to renew automatically.
- Update internal links and images so they do not load over HTTP.
Common mistakes
- Leaving images or scripts on HTTP, causing mixed content warnings.
- Letting a certificate expire, which shows visitors a full-page warning.
Questions about HTTPS
What is HTTPS?
The secure version of HTTP, where traffic between visitor and site is encrypted with TLS.
Is an SSL certificate the same as HTTPS?
The certificate is what makes HTTPS possible. Today's certificates actually use TLS, but many people still call them SSL certificates.
Will switching to HTTPS hurt my rankings?
Not if done properly with redirects and updated links. Google treats a clean HTTPS move as a normal site change.
