Does the padlock (HTTPS) mean a website is safe?
Short answer
No. The padlock means the connection between your browser and the site is encrypted, so others on the network cannot read it. It says nothing about who runs the site; scam and phishing sites use HTTPS too, because certificates are free and automatic.
The details
Check the domain name itself, and reach important sites by bookmark or typed address. For your own website, HTTPS is essential and free through services like Let’s Encrypt.
Useful next reads and tools
- Website Security Check · tool
Terms explained
- HTTPS and TLS
- HTTPS is HTTP protected by TLS encryption, which keeps data between a browser and a website private and tamper-resistant and confirms the site controls its domain.
- Phishing
- Phishing is a fraudulent message, usually email, that impersonates a trusted sender to trick people into revealing credentials, paying money or running malware.
Sources
Related questions
- How can I check whether a website is legitimate before buying or signing in?
- Do I need a VPN?
- Does incognito or private browsing mode hide what I do online?
- How do I reduce my digital footprint and protect my privacy online?
- Is it safe to save passwords in my web browser?
- What is identity theft and how do I protect myself?
Related Guides
GuidePersonal Security
10 Ways to Keep Your Funds Safe on a Crypto Exchange After the Binance Hack Reports
Binance is investigating a suspected hot wallet hack. Here are 10 practical steps to protect crypto held on any exchange: account security, withdrawal limits, self-custody and scam awareness.
Read more GuidePersonal Security
Binance Hacked: $6.3 Billion Stolen — What Happened and How to Protect Your Crypto
Binance suffered a massive cryptocurrency theft on October 29, 2026. Here's what we know about the breach, what remains unclear, and how to protect your crypto from hackers and increasingly convincing scams.
Read more GuidePersonal Security
How to Tell If a QR Code Is a Scam: Step-by-Step Inspection
Learn how to tell if a qr code is a scam before scanning. Check physical tamper signs, preview URLs, and protect your accounts from fraudulent redirects.
Read more GuidePersonal Security
Delivery Text Scams: How to Spot, Stop and Report Fake Package Texts
Fake USPS, UPS, FedEx, DHL and Amazon delivery texts steal card details. Learn the red flags, what to do if you clicked, and how to report them.
Read more