On this page
Quick answer: An SSL (TLS) certificate encrypts the connection between visitors and your website, which shows as HTTPS and a padlock. Every website needs one, it is often free, and it must renew automatically before it expires.
What it does
Without SSL, information sent between a visitor and your site, including form entries and passwords, can be intercepted. SSL encrypts it and proves the visitor is talking to your real website. Browsers label sites without it as "Not secure", which scares visitors away.
Why every website needs it
- It protects contact forms, logins and payments
- Browsers warn visitors away from sites without it
- Google uses HTTPS as a signal and shows it in Search Console
- Many features, such as location access and payments, only work over HTTPS
Free certificates and renewals
Most hosts provide free certificates, for example from Let's Encrypt, that are valid for a short period, around 90 days, and renew automatically. The automatic renewal is what matters: if it fails, the certificate expires and visitors see a security warning. Good hosting monitors this.
Paid certificates
Paid certificates offer the same encryption, with extras such as organisation validation or warranties. Most small businesses don't need them.
After installing SSL
- Redirect every http:// address to https://
- Fix "mixed content": images or scripts still loading over http
- Use the https address in Google Search Console and on your profiles
Seeing a warning? Read fixing SSL errors.
Domains & Hosting from Digitalx, priced in writing before we start.