1. SSL certificates
SSL turns http into https and shows the padlock. Browsers warn visitors away from sites without it, and Google favours secure pages. Free SSL covers most sites; shops and wildcard subdomains may want a paid certificate.
Security
Website security basics: SSL certificates, backups and secure hosting
Website security rests on three basics: an SSL certificate to encrypt visitors' data, automatic backups so you can recover from any mistake or attack, and secure hosting that blocks malware and keeps software updated.
Published 21 October 2026 6 min read
2. Automatic backups
Backups are your undo button for hacks, failed updates and accidental deletions. Make sure they run automatically and you can restore them yourself.
Secure your website today
Free SSL on every plan, plus paid certificates, backups and security tools.
3. Secure hosting
Look for malware scanning, a web application firewall, isolated accounts and fast security patches.
Quick security checklist
- Use strong, unique passwords and two-factor login
- Keep WordPress, themes and plugins updated
- Remove plugins you don't use
- Check that backups exist and work
Frequently asked questions
- Is a free SSL certificate enough?
- For most websites, yes. Paid certificates add validation and wildcard coverage for multiple subdomains.
Need a hand applying this?
Our engineers answer setup and migration questions in plain language, 24 hours a day.