What is SSL? (And what is HTTPS?)

SSL/TLS certificates explained simply: what they encrypt, what the padlock means and doesn’t, and why every website needs HTTPS.

ExplainerBeginner2 min readUpdated

An SSL certificate lets a website prove its identity and encrypt the connection between the site and each visitor. When it’s working, the address starts https:// and browsers show the site as secure.

SSL or TLS?

TLS is the modern protocol; SSL is its retired predecessor. Everyone still says “SSL certificate”, but every secure connection today actually uses TLS.

What it does

  • Encrypts everything sent between browser and server: passwords, form entries, cookies, the pages themselves
  • Authenticates the server: the certificate is issued for your domain by a trusted authority, so visitors know they reached the real site
  • Protects integrity: nothing can be injected into pages in transit

What it doesn’t do

The padlock means the connection is private. It doesn’t mean the site is honest, safe or free of malware. Phishing sites have certificates too.

Why every site needs it

  • Browsers label plain http:// pages Not secure, especially on forms
  • Search engines prefer HTTPS pages
  • Modern browser features — location, camera, service workers — require it
  • Public Wi-Fi users are protected from snooping

On Traxio

Certificates are free and issued automatically for your domain once it points at Traxio, then renewed without you doing anything. How free SSL certificates work on Traxio

New to Traxio? Hosting is 30 days free with no card needed, then £0.99 a month. See what’s included

Popular

Tip: press / to search from any pageSee all results