Well SSL is a must these days! You have a few options here.
- Buy a certificate and add it to your server configuration. That depends on what system you use, nginx, apache, etc.
- Use LetsEncrypt to generate a free certificate. It's important to know that you need to refresh this every 3 months (this can be done automatically)
- Use CloudFlare. The have free certificates as well and DDOS protection. One important thing is that they need to manage your DNS settings as well.
If you're new to this I would go for option 3 ;)