Browser security errors › Chrome and Edge
"Not secure" in the address bar: how to fix it on your website
The page is served over HTTP without TLS, or has insecure form fields.
What your visitors see
A 'Not secure' label next to the URL, and stronger warnings when typing in forms.
Common causes
- No HTTPS on the site
- HTTP not redirected to HTTPS
- Forms posting to HTTP URLs
How to fix it
- Install a free certificate from Let's Encrypt
- Redirect all HTTP traffic to HTTPS with a 301
- Add Strict-Transport-Security once HTTPS works everywhere
Check your certificate and TLS setup
Korrali Web scans your site for certificate, TLS and security header problems and can monitor it so you hear about expiry before visitors do.