What is SSL and why does my website need HTTPS?
What SSL does
SSL, now usually called TLS, protects information sent between a visitor and your site. Without it, data such as contact form messages could be read by others on the same network. Browsers also warn visitors when a site does not use HTTPS, which can make people hesitant to stay.
A secure certificate is shown by a padlock icon in the address bar. You do not usually need to buy a separate certificate, since many hosts provide one automatically.
- Encrypts data between visitor and site
- Shown with HTTPS and a padlock
- Many hosts include it automatically
- Browsers warn on sites without it
Turning it on
Check your host or builder settings for an option to enable HTTPS or a free certificate. After it is active, make sure every page loads on the secure address and that links point to the HTTPS version.
Test the site after the change. Mixed content, such as old image links, can cause warnings even when the main page is secure. Look for a lock icon or the words Secure in the address bar after you finish the change. Keep a list of pages you checked so you can repeat the test later.
Common mistakes
- Assuming a site is secure without checking that every page uses HTTPS.
- Forgetting to update old links that still point to the non-secure address.
