Security
SSL Certificates
Secure your website with an SSL certificate — protect customer data, show the padlock, and remove 'Not Secure' warnings.
Overview
SSL Certificates explained
An SSL certificate is what turns your website address from http into the secure https, putting the padlock in the browser bar and encrypting the data that travels between your site and your visitors. It is the small green-light signal customers now look for before they trust a site with their details. With Cockatoo, we install and renew SSL for you, usually at no extra cost.
Without SSL, modern browsers like Chrome flag your site as "Not Secure", a warning that can stop a potential customer in their tracks. SSL fixes that. It also matters for search, since Google gives a gentle ranking preference to secure sites served over https.
You do not need to understand encryption to benefit from it. We handle the certificate, switch your site to https and keep it renewed, so your customers always see the padlock and never the warning.
What to check
Key points
- Removes the browser "Not Secure" warning that scares visitors away.
- Encrypts data in transit, protecting contact forms, logins and payment details.
- Shows the padlock and https that customers expect before they trust you.
- Helps with SEO, since Google favours secure https sites over plain http.
Before you start
What you'll need
- A live website hosted somewhere we can configure, ideally with Cockatoo.
- Your domain name and access to its settings to verify ownership.
- A short list of any pages with forms or logins, so we confirm they are covered.
- Permission to switch your site address from http to https.
- An email address for renewal reminders, though we handle renewals for you.
Process
How it works
- Confirm which domain and subdomains need securing (for example www and your main address).
- Issue and install the SSL certificate on your hosting — we do this for you.
- Switch your site to load over https and redirect old http links across.
- Check every page loads with the padlock and fix any "mixed content" warnings.
- Set the certificate to renew automatically so it never lapses.
Avoid these
Common mistakes
- Installing SSL but leaving images or scripts loading over http, which triggers a "mixed content" warning.
- Letting a certificate expire, which instantly shows visitors a scary security error.
- Forgetting to redirect old http links, so some pages stay insecure.
- Assuming SSL alone makes a site fully secure — it protects data in transit, not against malware or weak passwords.
Common questions
SSL Certificates FAQs
What does an SSL certificate actually do for my website?
An SSL certificate encrypts the data that passes between your website and your visitors, so things like contact form details or login passwords cannot be read in transit. It also turns your address into secure https with a padlock, and removes the "Not Secure" label that browsers otherwise display.
Do I have to pay for SSL?
With Cockatoo hosting, a free SSL certificate is included, and we install and renew it for you. There are paid certificates with extra features for large enterprises, but for the vast majority of small-business sites the free, automatically renewed option is all you need.
Will SSL help my Google ranking?
It can help a little. Google has confirmed it gives secure https sites a small ranking preference over plain http ones. SSL on its own will not rocket you to the top of search, but it is one of the basic signals Google and customers both expect to see.
What is the "Not Secure" warning and how do I get rid of it?
That warning appears when a site loads over http without a valid SSL certificate. Browsers show it to caution visitors before they enter any details. Installing SSL and switching the site to https removes the warning and replaces it with the reassuring padlock instead.
Related pages