SEO glossary · H

HTTPS

What is HTTPS?

HTTPS (Hypertext Transfer Protocol Secure) is the encrypted version of HTTP, the protocol browsers use to load web pages. It stops anyone between a visitor and a website from reading or changing the data they exchange, and confirms that the visitor is connected to the real site.

How HTTPS works

The website installs a TLS certificate (often still called an SSL certificate) issued by a trusted certificate authority. When a visitor connects, the browser checks the certificate and the two agree on encryption keys, so everything sent afterwards is encrypted. Browsers show a padlock or a similar icon in the address bar.

Why every site needs HTTPS

  • Security and privacy: passwords, form entries and payment details can’t be intercepted.
  • Trust: browsers label HTTP pages “Not secure”, which puts visitors off.
  • SEO: HTTPS is a lightweight Google ranking signal and part of page experience.
  • Features: many modern browser features, and faster protocols such as HTTP/2 and HTTP/3, only work over HTTPS.

Moving to HTTPS

  • Install a certificate; Let’s Encrypt offers free ones, and most hosts include them.
  • Redirect every HTTP URL to its HTTPS version with a 301.
  • Update internal links, canonical tags and sitemaps to HTTPS.
  • Fix mixed content: images, scripts or styles still loaded over HTTP.
  • Check the HTTPS version in Google Search Console, ideally with a domain property that covers both.

HTTPS migration example

A company moves its site from HTTP to HTTPS. It installs a certificate, sets a 301 redirect from every HTTP URL to its HTTPS version, updates canonical tags, internal links, the sitemap and image URLs, and adds the HTTPS site as a new property in Search Console. Within weeks, Search Console shows the HTTPS pages indexed and visitors no longer see the “Not secure” warning.

HTTPS checklist

  1. Install a valid certificate and set it to renew automatically.
  2. Redirect all HTTP URLs to HTTPS with a single 301.
  3. Update canonicals, internal links, hreflang and sitemaps to HTTPS.
  4. Fix mixed content: images, scripts and styles still loaded over HTTP.
  5. Add HSTS once everything works.
  6. Check the site in Search Console and in the browser for warnings.

HTTPS mistakes

  • Letting the certificate expire, which shows a full-page warning.
  • Leaving mixed content on pages.
  • Redirecting only the home page.
  • Forgetting subdomains.

HTTPS FAQs

Is HTTPS a ranking factor?

Google uses it as a light signal, and browsers warn users on HTTP pages, so it matters for trust anyway. See SSL and HTTP.

Does HTTPS slow my site down?

Not noticeably on modern servers, and HTTP/2 and HTTP/3 need it. See page speed and 301 redirects.

Get in touch

Know the term. Now rank for it.

Tell us the search you want to win. A specialist reads it and replies by email, and if it helps, we set up a short call.

    A specialist reads your message and replies by email.

    Protected by reCAPTCHA: Google's Privacy Policy and Terms of Service apply.