Yes, and without it payments will not be connected at all. HTTPS is a payment data security standard requirement and one of the first things checked during the site review. Without a certificate the browser marks the page insecure and the buyer never reaches checkout.
Why it is mandatory
- An unencrypted connection can be read and tampered with on the way to the site.
- A checkout page will not open embedded in an insecure context.
- Onboarding review rejects sites without a valid certificate.
What to check on your side
- The certificate is valid and not expired — renewal is usually automatic but fails silently.
- The whole site serves over HTTPS, not just the cart page.
- No mixed content: images and scripts loaded over HTTP.
- HTTP requests redirect to HTTPS rather than serving a duplicate page.
What else is checked during onboarding is covered in why a site fails the review.
