HTTPS means the connection between a visitor's browser and your website is encrypted and checked, using a certificate and the TLS protocol. It stops others on the network from reading or changing the traffic. It does not mean the website itself is safe or the business is trustworthy.
Visitor
Opens your https address.
Secure connection
The browser checks your certificate.
Your host
Sends encrypted pages.
Safe in transit
Others on the network cannot read it.
What HTTPS protects
web.dev explains (external site, opens in a new tab) that HTTPS protects the integrity and privacy of what passes between a site and its visitors. The technology behind it is Transport Layer Security (TLS) (external site, opens in a new tab), which provides encryption, integrity checks and a way to confirm that the site is the one it claims to be.
What the padlock does not mean
- It does not prove the business is honest.
- It does not mean the site's software is up to date.
- It does not protect a weak password.
Why every business site needs it
- Browsers warn visitors about sites without it, especially when a form is used.
- Forms, logins and payment pages must be protected.
- It is a normal part of a professional website.
How you get HTTPS
- Your host or developer installs a certificate for your domain.
- The site is set to open at the https address.
- The certificate is renewed before it expires.
Many hosts include this. Ask whether it is included and who renews it.
Common mistakes
- Letting the certificate expire. Visitors then see a warning page.
- Mixed content. Some images load over plain http, which breaks the padlock.
- Treating the padlock as complete security. You still need updates and strong passwords. See website care.
Key terms and where the definitions come from
Show key terms and sources
These explanations are ADA's own words, adapted from the independent sources named. Those organisations do not endorse or work with ADA, and the examples are illustrations, not real clients.
What is HTTPS?
HTTPS is the secure version of the web's HTTP protocol. It encrypts what passes between a visitor's browser and your site and lets the browser check that it is really your site.
Source: Based on web.dev, Why HTTPS matters.
Reference: web.dev: Why HTTPS matters (external site, opens in a new tab)
For a Namibian business: A Namibian business whose contact form sends names and phone numbers should use HTTPS so that information is not readable by others on the same public Wi-Fi.
Related ADA service: Website care plans
Common questions
Does HTTPS cost money?
It depends on the host. Many include it. Ask what is included and what happens at renewal.
How do I know my site uses HTTPS?
The address starts with https and the browser shows a padlock or similar sign.
Is HTTP the same as HTTPS?
No. HTTP sends data in plain form. HTTPS encrypts it.
Does HTTPS make my site secure?
It secures the connection only. You also need updates, backups and strong passwords.
What if my certificate expires?
Visitors see a warning. Renew it or ask your host to set automatic renewal.
Need help with this?
Optional. You do not need any ADA service to use what you have just read.
- Website care plans
Certificate checks, updates and backups. - Hosting and domain help
Secure set-up for new and existing sites.