All data exchange between your website and your website visitors must be encrypted. Encryption is the technology that scrambles data before transmission. It ensures that only authorized parties can read the data. Encryption is what keeps credit card numbers, addresses, social security numbers, and other sensitive information secure during online transactions. Be sure that you explain your customers about encryption. The checkout page is a great place to include brief information about what encryption technology your site uses. The key here is not to scare your customers with too much information, but to explain the security measures your company takes to provide a same shopping experience.



California passed a law in 2003 requiring businesses to notify consumers in the state if their unencrypted data have been compromised. Several other states have passed similar laws. Several major credit card companies such as Visa and MasterCard require businesses operating online to verify that they have taken a number of steps, including encryption, to protect customers who use credit cards.

SSL (Secure Socket Layer)

You need SSL is you have an online store and accept credit cards. Anytime sensitive data is transmitted between your website and your customer's computer, you are using SSL. Without SSL, all data transferred would be an open book, leaving consumers vulnerable. Data sent without SSL is the equivalent of sending a letter in a see through envelop.

SSL Certificates

Digital certificates are the lifeblood of SSL technology. SSL certificates are issued by CAs (Certificates of Authority) such as VeriSign Corporation. VeriSign digitally signs each certificate it issues. Each browser contains a list of CAs to be trusted. During the SSL handshake, the browser confirms that a trusted Certificate of Authority has issued the certificate. If the CA is not trusted, a warning will show. As browsers recognize an SSL Certificate, they display the name of the CA next to the browser bar.

Practical Example: If you are using a shared hosting account for your site. The host will provide you with a shared SSL certificate. The shared certificate should be included in your hosting fee. It is an inexpensive solution to keep your website secure.