You’ve probably noticed the little padlock next to a website’s address, or the “Not secure” warning when it’s missing. That padlock comes from an SSL certificate. It’s one of those behind-the-scenes things every business website needs, and luckily it’s usually easy to get right.
What SSL does
SSL (you’ll also hear “TLS”) encrypts the connection between a visitor’s browser and your website. That means information sent through your site, like contact form messages or login details, can’t easily be read by anyone snooping along the way. Sites with SSL load with https:// instead of http://.
Why it matters for your business
- Trust: browsers show “Not secure” warnings on sites without it, which scares visitors off
- Forms: contact and quote forms should always be sent securely
- Search: Google treats https as a baseline expectation
- Features: many modern browser features only work on secure sites
How to check your site
- Visit your site and look for the padlock in the address bar.
- Type your address with
http://and confirm it automatically switches tohttps://. - Check a few inner pages, not just the home page.
- Look for any “Not secure” or mixed content warnings.
Common problems
- Expired certificate: most certificates renew automatically; if yours doesn’t, visitors will see a full-page warning
- Mixed content: the page is secure, but an image or script loads over http, which can remove the padlock
- No redirect: the http version still works without switching to https
Does it cost money?
Many hosts include free certificates that renew automatically, and that’s plenty for most small business sites. Paid certificates exist for special cases, but you usually don’t need one.
Who handles it?
Usually your host or web designer. Ask them to confirm the certificate renews automatically and that all pages redirect to https. It’s a five-minute conversation that prevents an embarrassing warning later.
Questions I hear a lot
Is SSL the same as a website being hack-proof?
No. SSL protects the connection. Your site still needs updates, strong passwords, and backups.
Why does my site show a warning even though I have SSL?
Often it’s mixed content, meaning something on the page is loading over http. That’s usually a quick fix.
If you want a second set of eyes
Every site I host includes SSL. If yours is showing warnings, I’m happy to take a look. More on hosting here.