What Is SSL (HTTPS) and Why Does Every Business Website Need the Padlock?
What the padlock means, why Chrome shows "Not secure", whether you need a paid certificate, and three things to check so your SSL never breaks.
The little padlock in the browser comes from an SSL certificate (technically TLS). It encrypts everything between the visitor and your website, so nobody on the same Wi-Fi or network can read or change it.
Why it matters even if you don't sell online
- Browsers warn visitors. Chrome labels sites without HTTPS as "Not secure", especially on pages with forms.
- Your contact form sends personal data — names, phone numbers, sometimes more. That should be encrypted.
- Google prefers HTTPS and uses it as a ranking signal.
- Trust. People are more likely to call or buy when the site looks safe.
Free vs paid certificates
For almost every small business website, a free certificate from Let's Encrypt gives exactly the same encryption as a paid one. Paid certificates mainly add company validation or a warranty, which few small businesses need.
Three things to check
- Auto-renewal works. Free certificates last 90 days. If renewal fails, the site shows a full-page error.
- http redirects to https. Otherwise visitors who type your address can still land on the insecure version.
- The certificate covers both yourbusiness.com and www.yourbusiness.com.
"Mixed content" warnings
If the padlock is missing even with a certificate, a page is probably loading an image or script over plain http. Change those links to https.
Is your own website healthy? Check SSL, speed, mobile and email security in seconds.
Free website check