Google have started to ‘name and shame’ websites that are unencrypted (Do not have an SSL Security Certificate).
If your website has any kind of text input it will require an SSL certificate if you want to avoid the “Not Secure” warning in the address bar.