Web & SEO
What is HTTPS?
HTTPS is the secure version of the protocol browsers use to load websites, which encrypts everything sent between a visitor and your site.
New to Bolt? Sign up free.
Technical definition
HTTPS stands for Hypertext Transfer Protocol Secure. It wraps ordinary HTTP traffic in a layer of encryption provided by TLS, so data moving between the browser and the server cannot be read or altered in transit. The padlock in the address bar indicates an active HTTPS connection.
A site serves HTTPS by installing an SSL certificate and redirecting all HTTP requests to their HTTPS equivalents. Most hosting platforms now provision and renew certificates at no cost. Search engines treat HTTPS as a ranking signal, and browsers mark pages served over plain HTTP as not secure.
In plain terms
Without HTTPS, anything someone types into your site travels across the internet as readable text. Their name, their email, their card number. Anyone sitting on the same coffee shop network can read it.
HTTPS scrambles that traffic so only your server can unscramble it. The padlock is the browser telling the visitor that scrambling is switched on.
Why it matters
The cost of skipping HTTPS is no longer theoretical. Chrome and Safari display a not secure warning on any page with a form that is not encrypted. Visitors see that warning at the exact moment you are asking them for a phone number or a payment, which is the worst possible time to raise doubt.
There is no reason to run without it. Certificates are free, renewal is automatic on every major host, and the setup is usually a single toggle. The one thing worth checking after you turn it on is that every internal link, image, and script also loads over HTTPS. A single HTTP resource on an HTTPS page triggers a mixed content warning and breaks the padlock.
