This article has been updated in 2026.
In 2014, Google kick-started the “HTTPS Everywhere” campaign with a view to make the internet a safer place for everyone. This initiative aimed to emphasise the importance of online security and encouraged users to make use of HTTPS.
In 2015, Google made HTTPS a lightweight ranking signal, and in January 2017, Google began marking websites without an SSL certificate as unsecure in Google Chrome. [Updated] Today, HTTPS is no longer an emerging trend, it’s the assumed baseline for any legitimate website, and a site still running on plain HTTP stands out as a red flag to both visitors and search engines.
Google makes it very clear that websites requiring any kind of text input (including contact forms, login pages or search bars) from users must have an SSL certificate. A non-HTTPS site is marked as insecure directly in the address bar.
What is SSL?
SSL is short for Secure Socket Layer, a universal encryption technology used for transferring data from a visitor’s internet browser to the website’s hosting server. SSL encryption helps ensure that hackers cannot intercept the data visitors submit on your website.
So how do you know if a website is secure?
If a website is secure, the URL pane will show HTTPS, signifying it’s a secure site. If the URL pane simply shows HTTP, it means the site is unsecure, and your browser will clearly flag it as such.
HTTPS and your website ranking
[Updated] HTTPS adoption across the web has grown enormously since Google first introduced it as a ranking signal, today the overwhelming majority of top-ranking websites run on HTTPS, to the point where it’s less a differentiator and more a prerequisite. A site without it isn’t just missing a minor advantage, it’s actively working against its own rankings.
So what does all of this mean for your website’s ranking?
The picture is crystal clear. If your website is unsecure, you could lose your current rankings, or never gain them in the first place. If you’ve launched a new website recently, it’s unlikely to rank at all until the connection is secure.
In conclusion
It wouldn’t just be safe, it would be prudent, to make your website secure if you’re expecting users to fill out any form, even a simple contact form. If you run an e-commerce website, the need for HTTPS is even more urgent.
[Updated] Most hosting providers today bundle a free SSL certificate as standard, so if you’re not sure whether yours is properly configured, it’s worth checking with your web design agency in Melbourne to make sure it’s set up correctly and renewing as it should.