Trust
SSL and the looking-legit checklist
HTTPS is table stakes. The rest of looking legitimate is matching NAP, a real phone number, hours, and a page that could sit next to your Google Business Profile.
By Gary Thomas · Updated August 25, 2026 · 8 min read
Material connection. This article includes affiliate links to GoDaddy. If you buy through those links, Shopfront Stack may earn a commission. It does not change the price you pay. We are not employed by these merchants, we did not “test 47 hosts,” and we do not sell star ratings. Read the full disclosure.
“Looking legit” is mostly consistency. HTTPS is the part software can enforce. The rest is whether a cautious homeowner believes the page, the van, and the Google listing are the same business.
SSL / HTTPS, in one paragraph
SSL (today, TLS) is the encryption behind the padlock. Browsers mark plain http:// as Not Secure. Every current website builder — including GoDaddy Website Builder (affiliate link to GoDaddy, placeholder URL), Squarespace, and Wix — issues a certificate as part of the plan. You should not need to buy a separate certificate, an extended-validation upgrade, or a clip-art trust seal for a local service brochure.
Your job: after publish, open the live URL on a phone, confirm https://, and confirm you do not have a mixed “www vs non-www” duplicate that Google has to guess at. Pick one canonical host and redirect the other if the builder offers it.
The looking-legit checklist
Work this list once when you launch and again when you reprint cards. None of it requires a marketing retainer.
HTTPS on the URL you actually share
Padlock present. No certificate warning. No “click through to this unsafe site.”
NAP match
Name, address (or service area), and phone identical on the site, Google Business Profile, and invoices.
A real, tappable phone number
tel: link. If you use a call-tracking number, still keep a stable public number on the site.
Hours that are true
Including how emergencies work. Wrong hours are how you earn a one-star that you cannot design away.
One photograph you actually took
Truck, studio, or a recent job with permission. Stock kitchens make trades look like lead-gen mills.
License / insurance if your market expects it
A line of text beats a fake badge generator. Link to the state lookup if you have one.
A human email on your domain
See the professional email guide. Contact forms can exist, but mail still has to land.
No “under construction”
A short live page beats a coming-soon screen with a countdown.
Privacy basics if you collect leads
If the form asks for a name and number, say what you do with it. A paragraph is enough for most trades.
The same story on Google
Claim and complete the Business Profile. Link it to this URL.
Optional, not month-one
- A blog. Write when you have a repeating question, not to feed an algorithm.
- Chat widgets. They often ring a phone you are already carrying.
- Review widgets that load slowly and duplicate what Google already shows.
Claim the profile here: Google Business Profile. Then go back to the default setup if any of the page itself is still missing.