What is an SSL certificate?
Definition
An SSL certificate is a small data file that lets a website use https, the secure version of a web address. It encrypts what passes between your site and a visitor, such as form details or card numbers, and proves to the browser that the site really belongs to your domain.
Why every business website needs one
Without one, browsers label your site "Not secure", right next to your address. That's the last thing you want a customer to see before they type their name, address and phone number into your form. Google has also used https as a ranking signal for years, and some browser features only work on secure sites.
The name is a leftover. SSL was replaced long ago by a newer standard called TLS, but everyone still says SSL. What matters is that your site loads on https with no warnings, on every page, including on your own domain. Certificates also expire, and a lapsed one throws up a full-page warning that few visitors click past.
For dental practices, https protects what patients type into appointment forms, though it doesn't make a website the place for health records: keep those in your practice software. For law firms, it protects consultation requests that often describe a sensitive matter. For restaurants that take catering requests or link out to ordering, it keeps the path to checkout trustworthy.
SSL secures the connection, not everything else. It won't stop a weak password, an out-of-date plugin or a phishing email. It's one layer of several, and a basic one. Use strong passwords and two-step sign-in on every account tied to your site, from your domain to your email.
How to check your site's certificate
- Type your address starting with http:// and check it switches to https:// on its own.
- Look for the padlock or site-info icon beside the address, not "Not secure".
- Click that icon to see who issued the certificate and when it expires.
- Check a few inner pages and your contact form page, not just the homepage.
- Check both versions of your domain name, with and without www.
How Future handles it
Every Future site loads over https, your own domain included. It's part of the hosting, security and upkeep that come with every plan, so there's no certificate to buy, install or renew, and no expiry date for you to track.
Form messages from your site are emailed to you and stored in Contacts. For anything more sensitive, like health records or the details of a legal matter, point visitors to the secure portal or practice software you already use.