SEO Guide
What are HTTPS and SSL?
By the Sanctuary Growth Co team · Last updated September 11, 2026
HTTPS is the secure version of the web address, and SSL is the certificate that makes it work by encrypting the connection between your site and each visitor. It is what puts the little padlock in the browser bar. Encrypted, verified sites are what browsers, Google, and visitors now expect as the baseline for any trustworthy business.
What is it?
When someone visits a plain HTTP site, the data traveling between their browser and your server is unencrypted — readable in transit. HTTPS fixes that using an SSL/TLS certificate, which encrypts the connection so information passed to your site, like a contact form message, cannot be casually intercepted. The certificate also confirms your site is really yours. Browsers show a padlock for secure sites and increasingly flag insecure ones with a warning, so HTTPS has shifted from a nice-to-have to the plain expectation for any legitimate website.
Why it matters for your spa
Trust is fragile online. A visitor who sees 'Not Secure' next to your spa's name in the address bar may leave before reading a word, and understandably so. Google has treated HTTPS as a ranking signal for years and browsers actively warn against sites without it, so a missing or misconfigured certificate can cost you both rankings and walk-ins. For a business handling client inquiries and, sometimes, personal details, encryption is also simply the responsible default. The padlock is small, but its absence is loud.
How we do it for you
We verify that your site has a valid, current SSL certificate and that HTTPS is working everywhere — not just on the homepage. We check for mixed content, where a secure page still loads an insecure image or script and breaks the padlock, and we make sure insecure HTTP requests redirect to the secure version so no one lands on an unprotected page. If something is misconfigured, we flag it clearly. This verification is part of our Website Security Setup, sits alongside our full security review, and its scope is listed on plans and pricing.
Does HTTPS help my Google ranking?
Google has confirmed HTTPS is a ranking signal. It is not the biggest factor, but a secure site is expected, and an insecure one can be flagged and disadvantaged.
What is mixed content?
A secure page that still loads some resource — an image or script — over insecure HTTP. It breaks the padlock and the security guarantee. We check for and resolve it.
Do I need to buy an SSL certificate?
Many platforms, including Shopify, provide one. We verify yours is valid and correctly applied across the whole site rather than assuming it is.
What if a visitor sees 'Not Secure'?
That warning drives people away. We find why it appears — usually a certificate or mixed-content issue — and make sure your site loads securely everywhere.