HTTPS
HTTPS (HyperText Transfer Protocol Secure) is the encrypted version of HTTP that protects data transmitted between a website and its users via SSL/TLS encryption. It has been an official Google ranking signal since 2014.
HTTPS (HyperText Transfer Protocol Secure) is the encrypted version of HTTP that protects data transmitted between a website and its users via SSL/TLS encryption. It has been an official Google ranking signal since 2014.
Why It Matters
Google confirmed HTTPS as a ranking factor in 2014. Today, HTTPS is so widespread that lacking it hurts rankings more than having it helps. Starting in 2026, Chrome enforces "HTTPS-by-default," automatically attempting HTTPS connections and displaying warnings for HTTP sites. Without HTTPS, sites lose user trust and face higher bounce rates.
HTTPS, SSL, and TLS
- HTTP: Web data transfer protocol (no encryption)
- SSL (Secure Sockets Layer): Original encryption protocol, now deprecated
- TLS (Transport Layer Security): Modern replacement for SSL
- HTTPS: HTTP + TLS encryption = secure communication
The industry still uses "SSL certificate" colloquially, but TLS is the actual protocol in use.
What HTTPS Protects
- Data encryption: Form data, login credentials, and payment information cannot be intercepted during transit
- Data integrity: Ensures transmitted data is not tampered with
- Server authentication: SSL/TLS certificates verify the site's identity
SEO Impact
Ranking signal: A confirmed Google ranking factor. All else being equal, HTTPS sites rank above HTTP.
Crawling and referrer data: When traffic moves from HTTPS to HTTP, referrer information is stripped, making analytics incomplete.
User trust: Chrome, Safari, and other major browsers display "Not Secure" warnings on HTTP sites, driving visitors away.
How to Implement
- Obtain an SSL/TLS certificate from your hosting provider or a Certificate Authority (CA)
- Install the certificate on your web server
- Set up 301 redirects from all HTTP URLs to HTTPS
- Update internal links, canonical tags, and sitemaps to use HTTPS URLs
- Register the HTTPS version in Google Search Console
Sources: