{"id":22253,"date":"2018-08-08T20:49:50","date_gmt":"2018-08-08T18:49:50","guid":{"rendered":"https:\/\/hetzner.co.za\/help-centre\/?p=22253"},"modified":"2025-12-30T13:19:49","modified_gmt":"2025-12-30T11:19:49","slug":"fix-not-secure-website-warning","status":"publish","type":"post","link":"https:\/\/xneelo.co.za\/help-centre\/website\/fix-not-secure-website-warning\/","title":{"rendered":"How to fix the \u201cNot Secure\u201d website warning in Chrome"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">Does your website automatically open to the <strong>http<\/strong> version rather than <strong>https <\/strong>and\u00a0displays the <strong>Not Secure<\/strong> message in the address bar?<\/span><\/p>\n<p><strong>We provide free Let\u2019s Encrypt SSL\/TLS certificates for all domains, which means that your website should be https compliant and shouldn\u2019t be marked as \u201cNot Secure\u201d<\/strong>.<\/p>\n<p><span style=\"font-weight: 400;\">Since the release of Chrome 68 in July 2018, Google Chrome marks all <strong>http<\/strong>\u00a0websites as \u201c<strong>Not Secure<\/strong>\u201d. When clicking on the\u00a0<strong>\u24d8<\/strong> (info) icon , there is no reference to a certificate and the site is considered to not have an SSL\/TLS certificate associated with the domain.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-22257\" src=\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2018\/08\/http_not_secure1.png\" alt=\"\" width=\"669\" height=\"326\" srcset=\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2018\/08\/http_not_secure1.png 1000w, https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2018\/08\/http_not_secure1-300x146.png 300w, https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2018\/08\/http_not_secure1-768x374.png 768w\" sizes=\"auto, (max-width: 669px) 100vw, 669px\" \/><\/span><\/p>\n<p><span style=\"font-weight: 400;\">Chrome currently marks <strong>https<\/strong>-encrypted sites with a <strong>lock<\/strong> icon. When the lock icon is clicked, the information panel shows that a valid certificate is active.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-27831\" src=\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2009\/08\/secure.png\" alt=\"\" width=\"445\" height=\"422\" srcset=\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2009\/08\/secure.png 636w, https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2009\/08\/secure-300x284.png 300w\" sizes=\"auto, (max-width: 445px) 100vw, 445px\" \/><br \/>\n<\/span><\/p>\n<p><strong>http<\/strong> is the older protocol over which data is sent between your browser and the website server. <strong>https<\/strong> is the newer, secure version of http, whereby all communication between your browser and the website is encrypted.<\/p>\n<p>This protocol is reliant on an\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/ssl-digital-certificates\/\" target=\"_blank\" rel=\"noopener noreferrer\">SSL\/TLS certificate<\/a>.<\/p>\n<h2>Solution<\/h2>\n<h3>You need to force HTTPS<\/h3>\n<p>As all domains hosted with us are provided with a free SSL certificate, your website should automatically open in <strong>https<\/strong> mode.<\/p>\n<p>If your website automatically opens in the <strong>http<\/strong> version rather than https, you need to <strong>force https<\/strong>.\u00a0Refer to the following articles for guidance:<\/p>\n<ul>\n<li>WordPress sites:\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/change-to-https\/\" target=\"_blank\" rel=\"noopener\">Change your WordPress site to HTTPS<\/a><\/li>\n<li>Other sites:\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/control-panel\/force-https-using-a-htaccess-file\/\" target=\"_blank\" rel=\"noopener\">Force HTTPS using the .htaccess file<\/a>\u00a0(You can follow the step-by-step instructions even if you are unfamiliar with the .htaccess file)<\/li>\n<\/ul>\n<p>Use the website <a href=\"https:\/\/www.whynopadlock.com\" target=\"_blank\" rel=\"noopener noreferrer\">WhyNoPadlock<\/a> to assist you.<\/p>\n<h2>Further possible problems:<\/h2>\n<p>If you still get this error on some or all of your website pages after forcing HTTPS, check for the following:<\/p>\n<h3>1. Mixed content errors<\/h3>\n<p>This means that the page consists of a mix of HTTP and HTTPS content.<\/p>\n<p>Websites that are updated to SSL, such as with Let\u2019s Encrypt, move from using the http protocol to using https. However, if there is any content included in the page that specify\u00a0<strong>http:\/\/<\/strong>\u00a0in their URL\u2019s instead of\u00a0<strong>https:\/\/<\/strong>, the browser will give a\u00a0<strong>Mixed Content<\/strong>\u00a0warning and may block the content. This content may be images, JavaScript, CSS or external resources like banners or advertising from external sites.<\/p>\n<p>To fix this error, see:\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/mixed-content-errors-https\/\">How to find and fix mixed content errors<\/a><\/p>\n<h3>2. Your site has no <strong>SSL\/TLS<\/strong><\/h3>\n<p>If your site doesn\u2019t load securely even if you insert an\u00a0<strong>https<\/strong>\u00a0in front of the domain name in the browser, it\u00a0<strong>may not have SSL activated<\/strong>. These are rare cases.<\/p>\n<p>See\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/ssl-not-working\/\" target=\"_blank\" rel=\"noopener\">Reasons why <span style=\"font-weight: 400;\">SSL\/TLS<\/span> may not work for your site<\/a>\u00a0to troubleshoot the problem.<\/p>\n","protected":false,"plain":"<span >Does your website automatically open to the <strong>http<\/strong> version rather than <strong>https <\/strong>and\u00a0displays the <strong>Not Secure<\/strong> message in the address bar?<\/span>\r\n\r\n<strong>We provide free Let\u2019s Encrypt SSL\/TLS certificates for all domains, which means that your website should be https compliant and shouldn\u2019t be marked as \u201cNot Secure\u201d<\/strong>.\r\n\r\n<span >Since the release of Chrome 68 in July 2018, Google Chrome marks all <strong>http<\/strong>\u00a0websites as \u201c<strong>Not Secure<\/strong>\u201d. When clicking on the\u00a0<strong>\u24d8<\/strong> (info) icon , there is no reference to a certificate and the site is considered to not have an SSL\/TLS certificate associated with the domain.\r\n<img class=\"alignnone wp-image-22257\" src=\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2018\/08\/http_not_secure1.png\" alt=\"\" width=\"669\" height=\"326\" \/><\/span>\r\n\r\n<span >Chrome currently marks <strong>https<\/strong>-encrypted sites with a <strong>lock<\/strong> icon. When the lock icon is clicked, the information panel shows that a valid certificate is active.\r\n<img class=\"alignnone wp-image-27831\" src=\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2009\/08\/secure.png\" alt=\"\" width=\"445\" height=\"422\" \/>\r\n<\/span>\r\n\r\n<strong>http<\/strong> is the older protocol over which data is sent between your browser and the website server. <strong>https<\/strong> is the newer, secure version of http, whereby all communication between your browser and the website is encrypted.\r\n\r\nThis protocol is reliant on an\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/ssl-digital-certificates\/\" target=\"_blank\" rel=\"noopener noreferrer\">SSL\/TLS certificate<\/a>.\r\n<h2>Solution<\/h2>\r\n<h3>You need to force HTTPS<\/h3>\r\nAs all domains hosted with us are provided with a free SSL certificate, your website should automatically open in <strong>https<\/strong> mode.\r\n\r\nIf your website automatically opens in the <strong>http<\/strong> version rather than https, you need to <strong>force https<\/strong>.\u00a0Refer to the following articles for guidance:\r\n<ul>\r\n \t<li>WordPress sites:\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/change-to-https\/\" target=\"_blank\" rel=\"noopener\">Change your WordPress site to HTTPS<\/a><\/li>\r\n \t<li>Other sites:\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/control-panel\/force-https-using-a-htaccess-file\/\" target=\"_blank\" rel=\"noopener\">Force HTTPS using the .htaccess file<\/a>\u00a0(You can follow the step-by-step instructions even if you are unfamiliar with the .htaccess file)<\/li>\r\n<\/ul>\r\nUse the website <a href=\"https:\/\/www.whynopadlock.com\" target=\"_blank\" rel=\"noopener noreferrer\">WhyNoPadlock<\/a> to assist you.\r\n<h2>Further possible problems:<\/h2>\r\nIf you still get this error on some or all of your website pages after forcing HTTPS, check for the following:\r\n<h3>1. Mixed content errors<\/h3>\r\nThis means that the page consists of a mix of HTTP and HTTPS content.\r\n\r\nWebsites that are updated to SSL, such as with Let\u2019s Encrypt, move from using the http protocol to using https. However, if there is any content included in the page that specify\u00a0<strong>http:\/\/<\/strong>\u00a0in their URL\u2019s instead of\u00a0<strong>https:\/\/<\/strong>, the browser will give a\u00a0<strong>Mixed Content<\/strong>\u00a0warning and may block the content. This content may be images, JavaScript, CSS or external resources like banners or advertising from external sites.\r\n\r\nTo fix this error, see:\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/mixed-content-errors-https\/\">How to find and fix mixed content errors<\/a>\r\n<h3>2. Your site has no <strong>SSL\/TLS<\/strong><\/h3>\r\nIf your site doesn\u2019t load securely even if you insert an\u00a0<strong>https<\/strong>\u00a0in front of the domain name in the browser, it\u00a0<strong>may not have SSL activated<\/strong>. These are rare cases.\r\n\r\nSee\u00a0<a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/ssl-not-working\/\" target=\"_blank\" rel=\"noopener\">Reasons why <span >SSL\/TLS<\/span> may not work for your site<\/a>\u00a0to troubleshoot the problem."},"excerpt":{"rendered":"<p>Since the release of Chrome 68 in July 2018, Google Chrome marks all http sites as \u201cNot Secure\u201d Here&#8217;s how to fix it.<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"lsx_disable_title":"0","_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","footnotes":""},"categories":[166],"tags":[24162],"topics":[10463],"class_list":["post-22253","post","type-post","status-publish","format-standard","hentry","category-website","tag-lets-encrypt-ssl","topics-website-problems"],"acf":[],"additional_meta":{"category_title":[{"term_id":166,"name":"Website","slug":"website","term_group":0,"term_taxonomy_id":166,"taxonomy":"category","description":"About your Website(s)","parent":0,"count":169,"filter":"raw","term_order":"120","cat_ID":166,"category_count":169,"category_description":"About your Website(s)","cat_name":"Website","category_nicename":"website","category_parent":0}],"tag_title":[{"term_id":24162,"name":"Let\u2019s Encrypt SSL","slug":"lets-encrypt-ssl","term_group":0,"term_taxonomy_id":24162,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"95"}]},"featured_image_src":null,"author_info":{"display_name":"janine","author_link":"https:\/\/xneelo.co.za\/help-centre\/author\/janine\/","author_avatar":"https:\/\/secure.gravatar.com\/avatar\/aa7eb245072caa276e9df6888f1456c90cbf5304bea0210152b08c26141c638e?s=96&d=mm&r=g"},"_links":{"self":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts\/22253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/comments?post=22253"}],"version-history":[{"count":0,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts\/22253\/revisions"}],"wp:attachment":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/media?parent=22253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/categories?post=22253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/tags?post=22253"},{"taxonomy":"topics","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/topics?post=22253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}