Lesson 004 · Does It Work? · 3 min
The missing padlock
Principle: If the browser says "Not secure", visitors believe it.
1 · The crime
What goes wrong
A small charity asks for donations. Next to its address, the browser shows "Not secure". Would you type your card number there?
2 · The law
If the browser says "Not secure", visitors believe it.
- HTTPS encrypts the connection between visitor and site; browsers warn on any page without it.
- Mixed content (an HTTPS page loading HTTP images or scripts) can also break the padlock.
- Trust also comes from basics: a real address, a privacy policy, clear prices and no hidden fees.
3 · The tool
Check it yourself, for free
- Your browser's address bar: look for the padlock or a "Not secure" warning.
- SSL Labs (ssllabs.com/ssltest) to check the certificate.
- WebPo's free site checker, which tests HTTPS and the redirect.
4 · The fix
Step by step
- Turn on HTTPS with your host; most offer a free certificate in one click.
- Redirect every http:// address to https://.
- Fix mixed content by updating old http:// links to images and scripts.
- Add a privacy policy and show full prices, including fees, up front.
5 · Homework
Type your site's address starting with http:// (no s). Does it jump to https:// automatically? Is there a padlock?