SSL Certificate

The padlock means everything travelling between a visitor’s browser and your site — form entries, logins, payments — is scrambled in transit. One caution: it proves the connection is encrypted, not that the site is trustworthy. Scam sites have padlocks too.

The S in HTTPS stands for secure, and it’s powered by an SSL certificate on your hosting. Sites still running plain HTTP get “Not Secure” stamped next to their name in Chrome. It’s the online equivalent of a shop with a broken front window.

Beyond trust, you need it because Google uses HTTPS as a ranking signal, payment providers require it, and browsers can block form submissions without it.

The good news: you almost certainly shouldn’t pay for one. Let’s Encrypt provides free certificates that renew themselves, and every modern host and website builder includes them by default. If someone’s charging you yearly for SSL on a standard small business site, you’re paying for something your hosting should include free.