You have probably seen the padlock next to a website address, and “Not secure” on others. It is a simple signal, but an important one for a trade website.
What it means
When the address starts with https:// instead of http://, the connection between the visitor’s device and your website is encrypted. The padlock is there because the site has an SSL certificate (more precisely a TLS certificate). Information sent, such as a name and phone number in your enquiry form, cannot easily be read by others on the way.
Why it matters
- Trust: browsers warn visitors when a site is not secure, and many will leave.
- Your customers’ details: forms send names, phone numbers and emails, which should be protected.
- Search: Google has said HTTPS is a lightweight ranking signal, and it expects modern sites to use it.
What it does not mean
The padlock does not prove that a business is honest or that the site is free of problems. It only means the connection is encrypted. Your site still needs updates, backups and strong passwords. See how to check your website is secure.
How to check yours
Go to your homepage and a few inner pages, including the contact page. Check that each address begins with https:// and shows no warning. Also try typing http:// and see that you are sent to the secure version.
What to do if there is a warning
The most common causes are an expired certificate, or old images and scripts still loading over plain http. Ask your host or developer to renew the certificate and fix mixed content. Most good hosting renews certificates automatically.
Certificates cost nothing on good hosting
Free certificates from Let’s Encrypt are used by millions of sites, and good hosts set them up and renew them for you. You should not need to pay extra for a basic one.
Our hosting
Every site we host has HTTPS set up and renewed for you. See the offer.
Make sure the padlock is there on every page, and that someone is responsible for keeping it working.