What Is HTTPS and Why the Padlock Is Not Enough

HTTPS encrypts the data between your browser and a website. It stops eavesdroppers on the network, but it does not vouch for the site itself.

What HTTPS guarantees

• The connection is encrypted.
• The site you reached holds a certificate for that domain.
• Content cannot be altered in transit.

What it does not guarantee

Scammers also use HTTPS. A fake bank site can have a padlock. Always check the domain name in the address bar.

Habits

• Type or bookmark important sites instead of clicking links.
• Look carefully for spelling tricks in the domain.
• Use browser warnings seriously.