Short answer
HTTP on its own does not encrypt data in transit; a party able to observe the connection may be able to read or alter it. HTTPS, in contrast, encrypts the data using TLS, so information exchanged between browser and server is protected from eavesdropping during transit. This does not guarantee the trustworthiness of the site itself. 1 2
HTTPS is an encrypted variant of HTTP, using the same protocol but adding a secure transport layer.
On this page
At a glance
Scroll to compare all columns →
| Question | HTTP | HTTPS |
|---|---|---|
| Feature | HTTP | HTTPS |
| Encryption | No built-in transport encryption | TLS protects HTTP traffic in transit |
| Typical Use | General web browsing, non-sensitive data | Sensitive activities like banking or shopping |
What each thing is
HTTP. HTTP (HyperText Transfer Protocol) is a network protocol that enables the transfer of hypermedia documents, such as web pages, typically over unencrypted connections between browsers and servers. 1
HTTPS. HTTPS (HyperText Transfer Protocol Secure) is an encrypted version of HTTP that uses TLS to protect HTTP traffic between a client and a server, protecting data in transit. 2
Key differences
The key technical difference is transport security: HTTP transmits information openly, while HTTPS wraps HTTP traffic in a TLS-encrypted channel, preventing others from reading or tampering with the data as it moves across the network. 1 2
How to tell them apart
You can recognize HTTPS by the “https://” prefix in the address bar, often accompanied by a padlock icon. However, visual cues alone do not confirm that all site content is secure or that the site is trustworthy. 1 2
Where they overlap
Both HTTP and HTTPS use the same underlying protocol for requesting and delivering web content. The difference is that HTTPS adds a layer of encryption to the standard HTTP process. 1 2
Edge cases
Some sites may serve a mix of HTTP and HTTPS content, or redirect between them. In such cases, only the HTTPS portions are encrypted; any HTTP requests remain unprotected, which can expose sensitive data if not handled carefully. 1 2
Why the distinction exists
HTTPS was developed to address the need for secure online transactions and privacy, especially as sensitive activities like banking and shopping moved onto the web, requiring encrypted communication between client and server. 2
Common misconceptions
A common misconception is that HTTPS means a website is safe or reputable. In reality, HTTPS only secures data in transit; it does not verify the legitimacy or intentions of the site itself. 2
Examples
When entering credit card information on a shopping site, HTTPS ensures your data is encrypted as it travels to the server. If the site used only HTTP, your details could be intercepted by anyone monitoring the network. 2
Sources
Sources checked October 3, 2026.
- MDN Web Docs — HTTP. HTTP definition.
- MDN Web Docs — HTTPS. HTTPS and TLS.