Does your website need HTTPS and an SSL certificate?

Yes, and it's not optional in 2026. Every major browser flags a site without HTTPS as "Not Secure" right in the address bar — the first thing a homeowner sees before they've read a word of your headline or your pricing.

What actually breaks without it:

• Chrome and Safari show a "Not Secure" warning next to your domain before anyone reads your copy
• Anyone filling out your quote form is typing their name, phone, and address into a page the browser just told them isn't safe
• Google has used HTTPS as a ranking signal since 2014 — it's a free point you're handing a competitor by skipping it
• Some browsers block mixed content outright, which can quietly break images or embeds served over plain HTTP

The good news: it costs nothing to fix. Free SSL certificates through Let's Encrypt are auto-provisioned and auto-renewed by every modern host — Vercel, Netlify, most GoDaddy and Bluehost plans. If a developer or agency is billing you a separate line item for "SSL setup," that's worth asking about.

Quick way to check your own site: look for the padlock icon next to your domain in the browser bar, and type https:// in front of your URL manually — a properly configured site redirects you there automatically even if you left it off.