Why it matters
Without HTTPS, people on the same Wi-Fi can read or change what visitors see and type. Browsers label such sites 'Not secure', which costs trust and sales.
Redirect every visitor
Make sure http:// addresses automatically move to https://. Most hosts have a one-click 'force HTTPS' setting.
Watch the expiry date
Certificates expire. Most hosts renew them automatically, but if yours doesn't, set a reminder: an expired certificate shows visitors a full-page warning.
Do this today
Run the free security check and confirm HTTPS works and http redirects to it.