HTTPS is HTTP with encryption added via TLS/SSL, so data traveling between your browser and the website can’t be read or tampered with by anyone intercepting it.
HTTP (HyperText Transfer Protocol) is the basic protocol browsers use to request and receive web pages. On its own, HTTP sends data in plain text — anyone monitoring the network between you and the server could read it.
HTTPS wraps that same HTTP traffic inside a TLS (Transport Layer Security) encrypted connection. This protects three things:
The address bar shows a lock icon and the URL begins with https:// instead of http://. Modern browsers actively flag plain HTTP sites — especially ones with login forms or payment fields — as "not secure." Google also uses HTTPS as a search ranking signal, so nearly all modern websites use it by default.
Last reviewed: September 2026