Three guarantees

Encryption, integrity, identity.

HTTPS keeps data unreadable in transit, tamper-evident, and proves you're talking to the real server — three separate promises people collapse into 'the padlock'.