HTTPS is an encrypted connection between the user’s browser and your server. With an SSL certificate, data (passwords, forms, payments) is not sent in plain text, so it’s harder to intercept.
Google has long favoured HTTPS sites in search results. Browsers (Chrome, Firefox) mark sites without SSL as “Not secure” or “Connection not secure” — which puts users off.
Many hosts offer a free certificate (e.g. Let’s Encrypt). It’s worth enabling HTTPS when you launch the site and setting a redirect from HTTP to HTTPS.
