If you've ever noticed a padlock icon in your browser's address bar, that's an SSL certificate at work. If you've seen a "Not Secure" warning on a website, that's what happens without one. Here's what it means and why your business website needs it.
What SSL does
SSL (Secure Sockets Layer) encrypts the connection between a visitor's browser and your website's server. In practical terms, it ensures that any information exchanged — contact form submissions, passwords, payment details — is protected from being intercepted.
You can tell a site has SSL because its address starts with https:// rather than http://. The padlock in the browser bar confirms the connection is secure.
Does your website need one?
Yes — without exception. Here's why:
Trust — Browsers like Chrome and Firefox actively warn visitors when a site doesn't have SSL. A "Not Secure" message in the address bar immediately damages confidence in your business, even if your site is entirely safe.
Google rankings — Google has confirmed that HTTPS is a ranking factor. Sites without SSL are at a disadvantage in search results compared to those with it.
Legal and compliance — If your website collects any personal data — even a simple contact form — SSL is required under GDPR to protect that data in transit.
SSL is not optional
There's no scenario in which a business website is better off without SSL. It's a basic requirement — like having a working front door.
The good news is that SSL certificates are now straightforward to set up and, with the right hosting, included at no extra cost.
What NC Digital includes
SSL is included as standard with our website hosting and security service — £20/month or £220/year for custom and WordPress sites. It's also included in our managed starter websites. You never need to think about it — we handle setup and renewal.
Good hosting and a proper SSL certificate are the foundation of a secure, trustworthy website. Read more about what website hosting should include for a full checklist.
Get in touch if you're unsure whether your current site has SSL properly set up.