What a secure website tells you about a business
The lock icon is one of the easiest signals to check. Here's what it means and where its meaning stops.
Updated Oct 12, 2026 · Vettley
When you visit a website, your browser shows a lock or "secure" label if the connection uses HTTPS. That lock comes from a security certificate. It is one of the seven signals in every Vettley report, so it is worth understanding exactly what it does and does not mean.
What HTTPS actually does
HTTPS encrypts the connection between your browser and the website. Anything you type, like your name, phone number or payment details, travels scrambled so others on the network can't read it. The certificate also confirms that the site you reached really belongs to that web address.
Why it is a useful signal
Free certificates have been widely available for years, and most website hosts install them automatically. That makes a missing or expired certificate a meaningful signal: it often means nobody is actively looking after the website. For a business asking you to fill in a quote form or pay online, it is worth noticing.
What an expired certificate looks like
Certificates expire, usually every few months, and are normally renewed automatically. When renewal fails, browsers show a full-page warning. Vettley reports note when a certificate expires so a business owner can fix it before customers ever see that warning.
What a lock does not tell you
- It does not mean the business is honest or does good work.
- It does not mean the business is licensed or insured.
- Scam sites can have valid certificates too.
Think of HTTPS as a basic sign of care, not a seal of approval. That's why Vettley shows it alongside other signals and never as a verdict on its own.
Business owners: an easy fix
If your report shows no secure connection or an expired certificate, ask your web host about AutoSSL or a free Let's Encrypt certificate. Once it's working, request a free recheck and your report will update.
Check a business now
Free, dated signal reports. No reviews, and scores can't be bought.