What is an SSL certificate?
An SSL certificate encrypts the connection between your visitor’s browser and your website, so anything they type (forms, card details, passwords) cannot be read in transit. It is what gives your site the padlock and https:// instead of http://.
What it actually does
Without SSL, information travels the internet as readable text. Anyone in a position to intercept it, like on public wifi, can read it. With SSL, the traffic is scrambled end to end. Only your visitor’s browser and your server can decode it.
Why you need one even without card payments
- Trust: browsers label sites without SSL "Not Secure" right in the address bar. Many visitors leave on the spot.
- Google: HTTPS is a ranking signal. Two similar sites, the secure one wins.
- Forms: if your contact form takes so much as a name and phone number, that deserves encryption.
What does it cost?
Typical costs
For almost every small business, the free kind is exactly as secure as the paid kind. The encryption is identical. If a company is charging you a lot "for SSL", ask why.
The catch to know about
Certificates expire, typically every 90 days for free ones, and must be renewed. Good hosting renews them automatically. An expired certificate throws a full-screen browser warning that scares off every visitor, so "kept up to date" matters as much as "installed".
The takeaway
- SSL encrypts what visitors send to your site and gives you the padlock.
- It is free or nearly free; the encryption is the same either way.
- It must auto-renew, or your site shows a scary warning when it lapses.
Want it handled instead of explained?
Everything in this article is included and looked after in every site I build. One monthly plan, no jargon, no surprises.
Start a project