What is SSL & HTTPS?
Learn what SSL certificates and HTTPS are, why they matter for your website, and how they're managed on your hosting platform.
If you look at the address bar in your browser, you'll see either http:// or https:// before a website address. That "S" stands for secure — and it's made possible by something called an SSL certificate. It's one of the most important things your website needs.
Quick summary
SSL (Secure Sockets Layer) is the technology that encrypts the connection between your visitor's browser and your website. It's what puts the padlock icon in the browser bar and changes http to https. On Flywheel, WP Engine, and Kinsta, SSL certificates are included free and renewed automatically — you don't need to do anything.
What SSL actually does
When a visitor connects to your website, information travels back and forth between their browser and your server. Without SSL, that information is transmitted in plain text — anyone in between (a hacker on a shared Wi-Fi network, for example) could read it.
With SSL, the data is encrypted. Even if someone intercepts it, they see scrambled nonsense they can't decode.
This matters especially when:
- Visitors fill in a contact form (their name and email are protected).
- Customers enter payment details or personal information.
- Anyone logs in to your site.
SSL vs TLS: what's the difference?
You'll sometimes see TLS (Transport Layer Security) mentioned. TLS is the modern, more secure version of SSL. The two terms are often used interchangeably in everyday conversation, but if you want to be precise, today's websites use TLS. Either way, it's the same padlock icon.
Why HTTPS matters for your business
Trust
Visitors see the padlock and feel safe. Without it, most browsers display a "Not secure" warning in the address bar — which can scare visitors away from your site.
Search rankings
Google considers HTTPS a ranking signal. A site without SSL is at a disadvantage in search results compared to one with it.
Legal and compliance
If your site collects any personal data — even just an email address from a contact form — many privacy regulations expect you to transmit it securely. HTTPS helps you meet that expectation.
How SSL is managed on our platforms
Flywheel provides free SSL certificates for all sites. SSL is usually configured during site setup. Certificates are renewed automatically — you don't need to do anything. See SSL on Flywheel for details.
WP Engine provides free SSL for all sites. Certificates are issued through Let's Encrypt or DigiCert and renew automatically. See SSL on WP Engine for details.
Kinsta provides free Cloudflare SSL certificates for all sites. SSL is managed from the MyKinsta dashboard and renews automatically. See SSL on Kinsta for details.
What you might notice
When SSL is working correctly:
- Your site address starts with
https:// - A padlock icon appears in the browser address bar
- There's no "Not secure" warning
If you ever see a security warning or the padlock is broken, let us know right away. This usually means a certificate has expired or there's a mixed-content issue (some elements loading over HTTP instead of HTTPS).
Common questions
Related guides
- What is web hosting?
- SSL on Flywheel
- SSL on WP Engine
- SSL on Kinsta
- SSL & HTTPS explained (security)
Need a hand?