What is the browser padlock, or security certificate?
Photo: Avila Ops Tecnologia
The padlock beside an address indicates a security certificate, called SSL or TLS, encrypting the connection between visitors and the website. Information entered in forms travels scrambled and only the server reads it. The address starts with https rather than http. Without the certificate, the browser warns “not secure.”
Customers seeing “not secure” do not enter their phone numbers or buy. Google also treats https as standard. Certificates are now free with most hosting, so lacking one is neglect rather than savings.
What does the padlock guarantee and what does it not?
It guarantees that nobody along the route reads or alters what passes between visitors and the website. On a bakery’s Wi-Fi, a customer’s password entered in your store is not visible to others on that network.
It does not guarantee an honest website. Scam sites can have padlocks, and many do. The padlock means “the connection is secure,” not “the company is trustworthy.” It is the minimum rather than enough: the rest comes from the CNPJ in the footer, real address, terms and privacy policy.
How do you get a certificate for your company website?
In most cases, hosting issues and renews a free certificate automatically. Common problems include:
- The certificate expires without renewal, causing a red warning overnight.
- The website uses https but an image or script loads through http, removing the padlock or creating a mixed-content warning.
- The www domain has a certificate while the non-www domain does not, or vice versa.
For example, an accounting firm migrated its website and the old certificate expired. For two weeks, visitors saw a danger warning and gave up. Fixing it took 10 minutes.
What to do now
Open your website with and without www, on phones and computers. Warnings or padlock alerts mean a hosting and DNS issue. For domains in your name and hosting with automatic certificate renewal, visit avilaops.com/dominio-e-hospedagem or WhatsApp wa.me/5517997811471.
Frequently asked questions
Do SSL certificates cost money?
Paid versions exist, but a free certificate such as those issued by Let’s Encrypt encrypts connections the same way. For company websites and small stores, a free certificate with automatic renewal works.
Why does my website show “not secure” only on some pages?
Almost always because of mixed content: an image, font or script on that page loads through http. Change its address to https.
Are padlocks related to domains?
Yes. Certificates are issued for domain names and DNS must point correctly. See the domain and DNS glossary entries.
Connections, made clear
A foundation for your online address.
Understand how domains, DNS, hosting and publication relate.
- DomainDefine the address that identifies your business.
- DNSPoint services to the correct destinations.
- HostingMake the files and application available.
- HTTPSConfigure access over an encrypted connection.
- VerificationCheck access and settings after changes.
- Domain. Define the address that identifies your business.
- DNS. Point services to the correct destinations.
- Hosting. Make the files and application available.
- HTTPS. Configure access over an encrypted connection.
- Verification. Check access and settings after changes.
Domain
Define the address that identifies your business.
Turn what you learned into your next step.
Tell us about your company and what you want to improve. We can explore the right tools, integrations or custom project together.