Updated 18 September 2026. This replaces our 2015 introduction, including its outdated descriptions of browser icons and certificate security.
HTTPS should be part of the foundations of a business website, whether it takes payments, accepts enquiries or simply publishes information. It protects information in transit between a visitor’s browser and the server and helps prevent it being altered along the way.
What does an SSL certificate do?
“SSL certificate” is the familiar name, although modern HTTPS connections use TLS. The certificate helps the browser authenticate the server as part of establishing an encrypted connection. See Google’s explanation of why HTTPS matters.
What does it not protect?
HTTPS does not prove that a business is trustworthy or that every part of its website is secure. It does not repair a vulnerable plugin, prevent staff accounts being compromised or decide who can access information after it reaches the server.
A certificate with additional organisation checks is not a substitute for secure development and maintenance. Avoid choosing one on the assumption that a more elaborate browser indicator guarantees a safer website.
Check the whole website, not just the homepage
- Check that HTTP addresses redirect to the intended HTTPS address.
- Make sure the certificate covers the domain names you use and renews successfully.
- Check pages for images, scripts and other resources still requested over HTTP.
- Test enquiry forms, sign-in areas and payment journeys after configuration changes.
- Keep software, access controls, backups and recovery arrangements under review.
Sending payments to another provider does not make an unencrypted website a good idea. Visitors may still submit enquiry details or interact with content on your own pages. Requirements for a particular payment setup should be checked with the provider.
Keep it working after launch
Include certificate renewal and HTTPS checks in ongoing website care. Explore inLIFE hosting and support, or ask our team to review your setup. For the wider picture, read our five website privacy checks.
