Maintenance

What Is SSL, and Why Does the Padlock Matter for a Small Business Website?

The padlock in the browser means your site uses HTTPS. Here is what that protects, why browsers warn visitors without it, and how to check your certificate is set up properly.

Minimal black and warm-white editorial illustration representing website care and maintenance
On this page

When a browser shows a padlock next to your address, it means the connection between the visitor and your site is encrypted. Without it, modern browsers show "Not secure" in the address bar, and many visitors leave on the spot. For a business website the padlock is not a technical nicety; it is a trust signal people have been trained to look for.

What HTTPS protects

An SSL certificate (technically TLS these days, but everyone still says SSL) encrypts what passes between the visitor and your server. On a business site that mostly means contact form submissions — names, phone numbers, sometimes addresses. It also proves the site really is yours and not an impostor sitting between you and the customer.

Why search engines care

Google has treated HTTPS as a ranking signal for years and marks non-secure pages plainly. If two sites are otherwise similar, the secure one has the edge. More practically, a "Not secure" warning next to your business name undoes every other trust signal on the page.

It should be free

Most hosts now include certificates from Let's Encrypt or similar at no charge and renew them automatically. If you are being charged separately for a basic certificate, ask why. Paid certificates make sense for e-commerce with strict compliance needs, not for a local trade or practice.

Three things that go wrong

  1. The certificate expires. Auto-renewal fails silently and the site shows a full-screen warning. Set a reminder to check every few months.
  2. Mixed content. The page is secure but one image or script loads over plain HTTP, so the padlock disappears. Usually an old image link that needs updating.
  3. Only one version is secure. www.yourbusiness.com.au works but yourbusiness.com.au does not, or vice versa. Both should redirect to a single secure address.

How to check yours

Type your domain with and without www and with http:// in front. All three should land on the same https:// page with a padlock. If any do not, your host or web designer can fix it in minutes. Checks like this are part of routine care — see what a care plan covers.

Need a clearer website?

YINO helps businesses turn outdated or unclear websites into focused, modern experiences.

View selected work