What is SSL and do I need it?
SSL is a security protocol that encrypts data traveling between your website and your visitors' browsers. It's the lock icon you see in the address bar. Yes, you need it—modern browsers flag sites without SSL as unsafe, and it protects customer information like phone numbers and payment details from interception.
- SSL encrypts data so hackers can't read customer info in transit.
- Browsers show a warning on non-SSL sites, tanking trust instantly.
- Most builders (including SiteFly) include SSL automatically—no extra setup needed.
- SSL costs nothing if your host includes it; standalone certs run $10–100/year.
- Google treats SSL as a ranking signal, though it's not the only factor.
How does SSL actually protect your site?
SSL creates an encrypted tunnel between your visitor's browser and your server. Without it, data like names, emails, and payment info travels in plain text—anyone on the network could theoretically intercept and read it.
Think of it like sending a postcard versus a sealed letter. The postcard (no SSL) is readable by anyone handling it. The sealed letter (SSL) is locked so only the intended recipient can open it.
SSL encryption makes customer data unreadable to anyone except your server and the visitor's browser.
What happens if you don't have SSL?
Modern browsers (Chrome, Firefox, Safari, Edge) display a big red warning—'Not Secure'—next to your URL. Most visitors will bounce immediately. They've been trained to distrust unencrypted sites, and they're right to.
Beyond visitor trust, payment processors and email services often refuse to work with non-SSL sites. If you collect any customer data—even just a contact form—you're exposing yourself to liability and looking unprofessional.
Browsers flag non-SSL sites as unsafe, causing visitors to leave before they even see your content.
Do you have to buy SSL separately?
No. Nearly every modern website builder and hosting provider includes SSL for free. SiteFly includes it automatically on all plans. You don't install it, configure it, or renew it—it just works.
If you're using an older or ultra-cheap hosting provider, you might have to pay for SSL separately or upgrade your plan. But that's rare now. When comparing builders, assume SSL is included unless explicitly stated otherwise.
- Most builders: SSL included automatically.
- Some budget hosts: May charge $10–100/year for a dedicated SSL cert.
- Your responsibility: Zero—the host handles renewal and updates.
Most website builders include SSL at no extra cost, so you don't need to buy or manage it yourself.
Does SSL help with search rankings?
Google has said SSL is a ranking signal, meaning sites with HTTPS (the secure version) have a slight advantage over HTTP sites. It's not the biggest factor—content quality and backlinks matter far more—but it's a small, free win.
More importantly, SSL removes a trust barrier that could hurt your rankings indirectly. If visitors bounce because of a 'Not Secure' warning, that signals to Google that your site isn't meeting user expectations.
SSL gives a small ranking boost and prevents the trust damage that comes from security warnings.
What if you're moving your site to a new builder?
SSL is tied to your domain, not your builder. When you move to a new host or builder, your SSL certificate moves with you (or a new one is issued automatically). You don't lose security in the transition.
If you own your domain outright and choose a builder that lets you own your code (like SiteFly's one-time purchase option), you have full control. You can take your domain and site anywhere, and SSL will follow.
SSL stays with your domain, so switching builders doesn't break your security or require you to buy a new certificate.
Questions people also ask
Can I see if a website has SSL before I visit it?
Yes. Look at the URL bar. If it starts with HTTPS (not HTTP) and shows a lock icon, SSL is active. If it says 'Not Secure' or shows an open lock, SSL is missing or misconfigured. This is your first clue about whether a site is trustworthy.
Does SSL slow down my website?
No. Modern SSL has negligible performance impact. In fact, newer protocols like TLS 1.3 (the current standard) are faster than older unencrypted connections. Your site speed is determined by hosting quality, image optimization, and code—not SSL.
What's the difference between SSL and TLS?
TLS is the newer name for SSL. They're the same thing—SSL is just the older term. When people say 'SSL certificate,' they usually mean a TLS certificate. Don't worry about the terminology; just make sure your site has the lock icon.
Do I need a special SSL certificate for subdomains?
Not necessarily. A standard SSL cert covers your main domain and www subdomain automatically. Wildcard certs cover all subdomains (like blog.yoursite.com, shop.yoursite.com). Most small businesses never need a wildcard—your builder handles this for you.
What happens when an SSL certificate expires?
Your host renews it automatically before expiration. You don't have to do anything. If renewal somehow fails, your site will show a security warning. But modern builders and hosts have automated renewal, so expiration is almost never a real problem.
Current plans and prices live on the pricing page, and the FAQ answers the questions we hear most.