Do you need an SSL certificate? HTTPS explained
You've seen the padlock in the browser address bar, and maybe the scary "Not secure" warning on sites without it. That's SSL — and these days every website needs it, not just online shops. It affects security, trust and even your Google ranking. Here's what it actually is, why it matters, and how to get one (usually for free).
What SSL and HTTPS actually are
An SSL certificate encrypts the connection between your website and its visitors, so information passing between them can't be read or tampered with in transit. When a site has one, its address starts with HTTPS (the "S" is for secure) and browsers show a padlock. Without it, you get plain HTTP — and modern browsers actively warn people away.
Why every site needs one now
- Security — it protects any data visitors send, from form details to logins to payments.
- Trust — the padlock reassures visitors; a "Not secure" warning scares them off.
- SEO — Google uses HTTPS as a ranking signal and favours secure sites.
- Expectation — it's now a baseline; a site without it can look broken or untrustworthy.
How to get one
The good news: SSL certificates are often free. Services like Let's Encrypt provide them at no cost, and most reputable hosts include and set one up automatically. For most sites there's no reason to pay for a basic certificate. Paid certificates exist for specific needs (like extended validation for large organisations), but the free ones provide the same encryption for the vast majority of businesses.
Making sure it's done right
- Check your whole site loads over HTTPS, not just the homepage.
- Make sure old HTTP addresses redirect to the HTTPS versions.
- Fix any "mixed content" warnings (images or scripts still loading over HTTP).
- Confirm the certificate renews automatically, so it never lapses.
The bottom line
SSL is no longer a nice-to-have or something only shops need — it's a basic requirement for every website, it's usually free, and going without it costs you trust, security and search ranking. If your site still shows "Not secure", that's a quick, high-priority fix worth sorting straight away.
Common questions
Do I need an SSL certificate for my website?
Yes — every website needs one now, not just shops. Browsers flag sites without HTTPS as "Not secure", which scares visitors away, and Google favours secure sites in rankings. SSL protects any data visitors send and is expected as a baseline. Since certificates are usually free, there's no good reason to go without.
What is the difference between HTTP and HTTPS?
HTTPS is HTTP with encryption added via an SSL certificate — the "S" stands for secure. On HTTPS, data passing between your site and visitors is encrypted so it can't be read or tampered with, and browsers show a padlock. Plain HTTP sends everything in the clear, and browsers now warn visitors that it's "Not secure".
Is an SSL certificate free?
Usually, yes. Services like Let's Encrypt provide SSL certificates free, and most reputable hosts include and configure one automatically. For the vast majority of sites there's no need to pay. Paid certificates exist for specialist needs like extended validation, but free ones give the same encryption for typical business websites.
My website says "Not secure" — how do I fix it?
That means it's missing an SSL certificate (running on HTTP, not HTTPS). The fix is to install an SSL certificate — often free and available through your host — and make sure the whole site loads over HTTPS with old HTTP addresses redirecting to it. Your host or a developer can usually sort it quickly; it's a high-priority fix.
Let's talk
Let's talk about your project.
Whether you've got a clear brief or just an idea, tell us what you have in mind and we'll give you an honest recommendation — even if that's a smaller project than you expected.