Security
Why every website needs an SSL certificate
The padlock is no longer optional. What an SSL certificate does, which type to choose and how to avoid the classic expiry trap.
An SSL certificate (technically TLS nowadays) encrypts the connection between your visitors and your website. It is what turns http:// into https:// and displays the padlock in the address bar.
What it protects
Without encryption, everything typed on your site (passwords, contact forms, payment details) travels in clear text and can be read or altered along the way, especially on public Wi-Fi. A certificate also proves to visitors that they are talking to your server and not to an impostor.
Why it matters, even for a simple site
- Browsers flag pages without HTTPS as "Not secure", which drives visitors away.
- Search engines use HTTPS as a ranking signal.
- Modern browser features, and many payment and analytics services, require HTTPS.
Choosing the right type
- Domain Validation (DV) confirms that you control the domain. Issued in minutes, it suits most websites.
- Organization Validation (OV) also verifies your company's identity, and is often preferred for business and e-commerce sites.
- Wildcard certificates cover every subdomain of a domain, such as shop.example.com and blog.example.com.
Don't let it expire
Certificates are valid for a limited period, and an expired one triggers a full-page browser warning. Turn on automatic renewal and keep an eye on expiry dates, especially for certificates installed by hand.