Encryption as a factor.
WHY IT MATTERS
Browsers mark sites without HTTPS as not secure.
Visitors see a warning before your content.
FOR SEARCH
A minor positive factor.
The larger effect is on visitor trust and behaviour.
WHAT TO SET UP
AutoSSL, covering every domain and subdomain on your account.
WHAT TO CHECK
That every page loads securely That HTTP redirects to HTTPS That no mixed content warnings appear
MIXED CONTENT
A secure page loading an insecure image or script.
Produces a warning and breaks the padlock.
Usually caused by hardcoded HTTP addresses in content or theme files.
HOW TO FIND IT
Browser developer tools report it.
Or a plugin that scans for it.
HOW TO FIX IT
Update the addresses to HTTPS.
For WordPress, a search and replace across the database, using a serialisation-aware tool.
WHAT TO CHECK AFTER MIGRATING
That HTTPS still works and redirects are in place.