A certificate, also known as a “digital certificate” or a “public key certificate,” is a file that helps keep web communications secure. Certificates are issued by trusted organizations, such as VeriSign, Inc. or RSA Security, Inc. When you visit an encrypted website—to do online banking, for example—Safari checks whether the site’s certificate is legitimate, and if it’s not, Safari warns you.
An encrypted website and Safari work together to encrypt information you exchange with the site. The key used for the encryption is contained in the site’s security certificate. This protects your sign-in information, credit card numbers, addresses, and other secure data.
If you need to connect to a website that requires a personal certificate, you’re provided with a certificate and instructions for installing it. After it’s installed, you gain authenticated access to the website automatically. If you’re unable to access it, contact the website administrator.
Important: If a website doesn’t use the HTTPS protocol, have a digital identity certificate, or encrypt information, the words “Not Secure” appear in the search field. Don’t enter personal or financial information on a website that isn’t encrypted. The website you’re visiting might not be the website you want, and information you enter is vulnerable to theft. Instead, go back to the webpage where you signed in and check for a link to another version of the site that’s encrypted—for example, “Use our secure site.” If available, use it, even if you don’t expect to view or provide private information.
Encryption makes your connection to a website secure, but that’s no guarantee the website itself is trustworthy. Fraudulent websites sometimes pose as trusted websites by swapping one or two letters in the website address. So always check the address in the Safari toolbar and confirm it’s correct.
See also
