SSL certificates automatically protect all domains connected to your Squarespace site, securing visitor data and preventing unauthorized access. Here's what you need to know about SSL certificates and how to manage them.

Eligibility Requirements:

• Squarespace domains (registered or transferred)
• Properly connected third-party domains
• Subdomains
• Integrated domains
• Domain names must be 63 characters or less

SSL Certificate Status SSL is enabled automatically with no setup required. Verify active status by:

• Checking the Domains panel for "Issued" status
• Confirming "Active" status in the SSL panel
• Visiting your site to verify the certificate

SSL Settings Options:

1. Secure (Recommended)

• Automatically redirects to HTTPS
• Includes HTTPS links in sitemaps
• Improves SEO through HTTPS indexing
• Requires SSL-compatible browsers

2. Secure HSTS

• Provides enhanced encryption
• Prevents site spoofing
• Eliminates "connection not private" errors
• Recommended to use with Secure setting

3. Insecure

• Allows both HTTP and HTTPS access
• Uses HTTP links in sitemaps
• Search engines index HTTP version
• Legacy setting for pre-October 2016 domains

Important Security Features:

• Checkout pages use 128-bit SSL encryption
• PCI Level 1 compliance for payments
• Automatic 90-day certificate renewal through Let's Encrypt
• 2048-bit SSL encryption on standard pages
• TLS 1.2 for all HTTPS connections

Custom Code Considerations:

• Mixed content warnings may appear with insecure elements
• Update custom code to use HTTPS
• Ensure third-party integrations support SSL
• Review code-based customizations for security compatibility

Certificate Verification:

• Look for "https://" in URL
• Check for padlock icon in browser
• Certificate details viewable in browser settings
• Supports all major browsers (Chrome, Firefox, etc.)

Note: Third-party SSL certificates are not supported. Sites must use Squarespace's built-in SSL protection.

Related Articles

Previous Articles