What protocol is used for secure web connections?

The protocol used for secure web connections is HTTPS. It is the secure version of HTTP, the protocol browsers and web servers use to exchange pages, images, forms, and other content.

HTTPS works by placing HTTP inside an encrypted Transport Layer Security (TLS) connection. TLS helps authenticate the website and protects data from eavesdropping or tampering while it travels between the browser and server. HTTPS normally uses port 443, while ordinary HTTP traditionally uses port 80.

A common mix-up is choosing TLS, SSL, or SFTP. TLS is the security technology underneath HTTPS, and SSL was its older predecessor. SFTP is a separate file-transfer protocol, not the standard protocol for browsing websites. HTTPS improves privacy and integrity, but a padlock does not guarantee that a site is trustworthy or free from scams.