If Chrome shows “Not secure” next to your website address, your visitors can see it too. It doesn’t mean you’ve been hacked, but it does make people hesitate, especially before filling in a form or paying. The good news is that it’s usually a quick fix.
What the warning means
Browsers show this warning when a page loads over HTTP rather than HTTPS. HTTPS encrypts the connection between your visitor and your website, so nobody in between can read or change what’s sent. To use HTTPS, your site needs an SSL certificate.
Why it matters
- Trust. A warning next to your name is a poor first impression.
- Forms. Without HTTPS, contact forms send details unencrypted.
- Google. HTTPS is a confirmed, if small, ranking signal.
The usual causes
- No SSL certificate was ever installed.
- The certificate has expired, often because auto-renewal failed.
- The site works on HTTPS but doesn’t redirect visitors from the HTTP address.
- Mixed content: the page is HTTPS, but some images or scripts still load over HTTP.
How to fix it
1. Get a certificate. Look in your hosting control panel for SSL or Let’s Encrypt. Most hosts provide one free.
2. Force HTTPS. Set up a redirect so anyone visiting the HTTP address goes to the HTTPS one. On WordPress, you’ll also need to update your site address under Settings, then General.
3. Fix mixed content. Update any old links to images and scripts so they use https://. Your browser’s developer console will list what’s causing the problem.
4. Check renewal. Make sure the certificate renews automatically, so the warning doesn’t come back.
5. Update your listings. Use the HTTPS address on your Google Business Profile and social media pages.
Check your site now
Our free website check tells you whether your site is secure, along with other quick wins. If you’d rather have it sorted for you, website fixes start at a one-off £49, usually within 48 hours.
Common questions
Does a “Not secure” warning mean I’ve been hacked?
No. It usually just means your site isn’t using HTTPS, or the certificate has a problem. It’s still worth fixing quickly.
Do I have to pay for an SSL certificate?
Usually not. Most hosts offer free certificates, often from Let’s Encrypt, and they work well for small business websites.