Do I need login page to be https when using SHA1?

I have been having guests of my webpage login using an online form that is only http not https . I have been using SHA1 encryption but do I also need to have those files saved as https and if so how to I convert the http pages to https?

No, login does not need to be done using the HTTPS protocol.


if you want to login using SSL, you would need to have an SSL Certificate installed for your site, then change the address you use to access the site from:
mysite.com

to:
mysite.com

just by using https:// in the address you tell the server to use the secure port to acess the website instead of the standard port.

What about the registration pages and password change pages?
They are both using SHA1 encryption as well.

Is there any specific types of pages that should be https, like dealing with credit card information?

SHA1 encryption has nothing to do with the choice to use SSL. It can be used on plan HTTP pages or on secure HTTPS pages.

HTTPS should be used all the time on checkout page where credit card info is transmitted.

It is considered a good practice to use HTTPS on login and registration pages, but it is not required.

look at gmail and face book as an example.

with gmail, the login page always uses HTTPS. Face book however, uses plain HTTP, they have an option to turn on secure login in the preferences though.