Websites and apps

What is an SSL certificate and why does my website need one?

By Mahmoud SaiedLast updated 27 October 20262 min read

The short answer

An SSL certificate is a digital file that proves your site's identity and encrypts its traffic, so the site's address starts with https. Without it, the browser shows that the connection is not secure, and visitors hesitate to fill in forms or pay.

Step by step

  1. 1

    Why you need it

    It protects what is sent through the site, such as forms, passwords and payment details, from being read or altered in transit.

  2. 2

    Browser and search trust

    Chrome warns visitors when a connection is not secure, and Google's page experience guidance asks whether your pages are served securely.

  3. 3

    Types of certificate

    One that verifies only domain ownership, one that verifies the organization, and one with extended validation. The first is usually enough for company websites and blogs.

  4. 4

    Free or paid

    Let's Encrypt is a free, automated certificate authority, and many hosting companies turn certificates on automatically.

  5. 5

    Automatic renewal

    Each certificate has a set validity period, so make sure it renews automatically and the warning never appears suddenly.

  6. 6

    Move every page

    Redirect all http links to https, and fix images and files that still load over http.

A common mistake

Installing the certificate while images or files still load over http makes the browser warn about the page or block those files. Move every resource to https.

People also search for this question as
  • what does https mean
  • website shows not secure