Technical SEO · HTTPS and Security

What Is HTTPS in SEO?

HTTPS secures your site and is expected by search engines. Here is what it is, what an SSL certificate does, how HTTPS affects rankings, how to migrate from HTTP, and what mixed content errors are.

Updated: July 2026
Written by: Andrew Odgers, Managing Director
Reading time: 8 minutes
The short answer

HTTPS is the secure, encrypted version of HTTP, protecting data between browser and site. An SSL certificate is the credential that enables HTTPS and the padlock. HTTPS is a confirmed but lightweight ranking signal, more baseline than boost. You migrate by installing SSL, updating links, and redirecting HTTP to HTTPS. A mixed content error is when a secure page loads insecure HTTP resources, which should be fixed by serving everything over HTTPS.

Secure by default

What HTTPS is, SSL, and how it affects rankings

HTTPS is the secure version of the HTTP protocol, encrypting data between a browser and a website so it cannot easily be intercepted, and it protects users and signals trust. Because it secures connections, HTTPS is expected for modern sites and is a factor search engines consider, though it is a lightweight signal rather than a major ranking boost. An SSL certificate is the credential that enables HTTPS, verifying a site's identity and enabling encrypted connections, and it is what makes the padlock appear. Because HTTPS depends on it, having a valid, correctly installed SSL certificate is essential for a secure site. HTTPS is a confirmed but lightweight ranking signal, so it can give a small edge, and just as importantly its absence can undermine trust and user confidence. It is more baseline than boost; because it is expected rather than exceptional, having HTTPS avoids a disadvantage more than it delivers a big gain.

HS 01

Encrypted

Secure connections.

HS 02

Expected

Baseline, not boost.

HS 03

Migrate well

Redirect everything.

Migrating and mixed content

Migrating from HTTP to HTTPS, and mixed content errors

You migrate from HTTP to HTTPS by installing an SSL certificate, updating internal links and resources to HTTPS, setting up redirects from HTTP to HTTPS, and updating your settings and sitemap. It is a careful process; because a migration touches every URL, planning and redirecting properly, as in any site migration, protects your rankings, which is exactly what we cover in our site migrations guide. A mixed content error happens when a secure HTTPS page loads some resources over insecure HTTP, which browsers may block or warn about. It undermines security; because it can break the padlock and hurt trust, fixing mixed content by serving all resources over HTTPS is important after a migration, and it is one of the checks in a technical audit.

SEO done properly, from £350 a month

Secure, trusted,
and clean.

We make sure your site runs fully on HTTPS with a valid certificate and no mixed content, and we handle HTTP to HTTPS migrations carefully. Security and trust as part of your technical foundations.

Everything included in your plan:

Google Maps optimisation Full website management Local SEO campaign AI optimisation (GEO) Facebook, Instagram and LinkedIn Quarterly audits Monthly reporting
£350 per month

One clear retainer. No setup fee.

Frequently asked

HTTPS and security

What is HTTPS in SEO?
HTTPS is the secure version of the HTTP protocol, encrypting data between a browser and a website so it cannot easily be intercepted. It protects users and signals trust. Because it secures connections, HTTPS is expected for modern sites and is a factor search engines consider, though it is a lightweight signal rather than a major ranking boost.
What is an SSL certificate?
An SSL certificate is the credential that enables HTTPS, verifying a site's identity and enabling encrypted connections. It is what makes the padlock appear. Because HTTPS depends on it, having a valid, correctly installed SSL certificate is essential for a secure site.
How does HTTPS affect Google rankings?
HTTPS is a confirmed but lightweight ranking signal, so it can give a small edge, and just as importantly its absence can undermine trust and user confidence. It is more baseline than boost. Because it is expected rather than exceptional, having HTTPS avoids a disadvantage more than it delivers a big gain.
How do you migrate from HTTP to HTTPS?
You migrate by installing an SSL certificate, updating internal links and resources to HTTPS, setting up redirects from HTTP to HTTPS, and updating your settings and sitemap. It is a careful process. Because a migration touches every URL, planning and redirecting properly, as in any site migration, protects your rankings.
What is a mixed content error?
A mixed content error happens when a secure HTTPS page loads some resources over insecure HTTP, which browsers may block or warn about. It undermines security. Because it can break the padlock and hurt trust, fixing mixed content by serving all resources over HTTPS is important after a migration.