Encryption is essential and security is priority.
If you want to force your users to use HTTPS version of your website, you can use a small code to do this.
Open .htaccess on your public_html folder or any sub-folder and add this code on top:
RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://www.example.com/$1 [R,L]
change example.com with your domain name.