What Does HTTPS Protect? 6 Website Security Basics
What does HTTPS protect? Understand the connection before trusting a site. This short video explains six points, with written steps and practical notes below.
1:47 · No narration: the video shows each step as text on screen, and every step is written out below, with buttons that jump the video to it.
Prefer YouTube? Watch this video on our YouTube channel (opens in a new tab).
The six points in the video
The video is silent. These are its on-screen headings, explanations and labels, followed by supporting notes.
-
Step 1: HTTPS protects the connection
TLS encrypts data travelling between browser and server.
On-screen labels: Browser; Encrypted connection; Website server.
HTTPS uses TLS to protect information in transit between the browser and the server. It is one part of protecting a business website.
-
Step 2: Certificates have a role
The browser checks the certificate for the connection.
On-screen labels: Correct domain; Certificate checks; Valid connection.
The browser checks whether the certificate is appropriate for the connection. Incorrect domains, expired certificates and other problems can cause warnings.
-
Step 3: It is not a business review
Encryption alone does not prove a seller is honest.
On-screen labels: Check the address; Check the business; Use trusted routes.
A fraudulent website can also use HTTPS. Check the full address and the business independently before trusting a payment or request.
-
Step 4: Heed browser warnings
Ask for help when a connection warning appears.
On-screen labels: Certificate warning; Unexpected address; Stop and investigate.
Do not teach customers to ignore a connection warning. Record what happened and ask the person responsible for the site to investigate.
-
Step 5: Protect the rest too
Account security and updates still matter.
On-screen labels: Strong access; Maintained software; Reliable backups.
An encrypted connection does not replace account protection, software maintenance or recoverable backups.
-
Step 6: Test important journeys
Review the actual pages customers use.
On-screen labels: Contact forms; Sign-in pages; Checkout routes.
Check the customer’s actual route through the site, rather than relying on the home page alone. Include any external booking or checkout destination.
A practical check for your business
Review the journeys where people submit information, including contact forms and sign-in pages. If a browser reports a certificate or connection problem, investigate with the responsible provider before asking customers to use that route.
Sources and further detail
Common questions
Does HTTPS mean a website is trustworthy?
HTTPS protects the connection. It does not establish that the business is honest or that every part of its website is secure.
Go further
More video tips
All 205 videos →
Website Backups: 6 Checks Before You Need a Restore
6 website backup checks.
Two-Factor Authentication: 6 Steps for Business Accounts
Protect your business accounts.