.png&w=3840&q=75)
Websites & Hosting4 min
How to Fix the Google Chrome "Not Secure" Warning
NS
NameSilo Staff9/3/2026
Share
The Google Chrome "Not Secure" warning appears because your website is loading over an unencrypted HTTP connection rather than secure HTTPS. To fix this, you must install an active SSL certificate on your web hosting server. Once installed, configure a 301 redirect to force all visitors to load the encrypted HTTPS version of your site.
HTTP vs HTTPS: Plaintext vs Encrypted
HTTP sends data between browser and server as plain, readable text. Anyone intercepting that connection, on public Wi-Fi, a compromised router, anywhere along the path, can read exactly what's being transmitted.
HTTPS wraps that same connection in encryption using an SSL/TLS certificate. The data becomes unreadable to anyone except the intended server.
Current Chrome behavior: A grey "Not Secure" label appears on any plain HTTP page. If a visitor types into a form field, especially password or payment fields, that warning escalates to a red triangle. Chrome has also moved away from the padlock icon in recent versions, replacing it with a settings-style icon for site information.
Why It Matters: Crushing Conversion Rates
By 2026, HTTPS carries over 98% of all web traffic. A site still running plain HTTP stands out as the exception, and visitors notice.
For a small business owner, this isn't cosmetic. A shopping cart, contact form, or login page flagged as "Not Secure" triggers instant distrust. Customers who were seconds from completing a purchase abandon the page rather than risk entering payment details on a site their own browser is warning them about.
Root Cause 1: Missing SSL Certificate
Without an SSL certificate installed on your server, HTTPS isn't possible at all; the encryption has nowhere to originate from. This is the foundational requirement, and every modern host should support one.
Important: Not every hosting tier includes SSL automatically. At NameSilo, only the Turbo hosting plan includes free SSL for all domains on the account. Lower tiers require purchasing an SSL certificate separately.
Root Cause 2: Missing Redirects
This is the step most people miss entirely. Installing an SSL certificate does not automatically force visitors to use it. Your site can have a perfectly valid certificate while still loading over plain HTTP by default, because nothing is telling browsers to prefer the secure version.
You need a 301 redirect rule, typically added to your .htaccess file or configured through a plugin, that catches every HTTP request and permanently redirects it to the HTTPS equivalent. Without this step, both versions of your site remain technically accessible, and search engines, bookmarks, and old links keep sending visitors to the unencrypted one.
Having SSL and forcing HTTPS are two separate steps. Completing only the first leaves the warning fully intact for anyone who doesn't manually type "https://" themselves.
Common Mistakes
Installing SSL but leaving mixed content active: If your HTTPS page still loads even one image, script, or stylesheet over plain HTTP, Chrome flags the entire page as insecure. This is called mixed content, and it's the most common reason the warning persists after SSL installation. Update internal links, image sources, and embedded scripts to use https:// throughout.
Assuming the redirect is automatic: Many users install a certificate, see the padlock disappear from errors, and stop there, never realizing the HTTP version of their site is still live and reachable.
What This Means for You
NameSilo SSL certificates are available for any hosting plan, and NameSilo Hosting's Turbo tier includes SSL free for every domain on the account. Either path gets you the certificate; the redirect step still needs to be configured afterward.
Frequently Asked Questions
Why does my website say not secure?
It's loading over HTTP instead of encrypted HTTPS.
How do I make my website secure?
Install an SSL certificate, then force HTTPS with a 301 redirect.
Does the not secure warning hurt SEO?
Yes. HTTPS is a confirmed Google ranking signal since 2014.
How do I force HTTPS on my website?
Add a 301 redirect rule in .htaccess or through a hosting plugin.
Is a website safe if it says not secure?
Not necessarily dangerous, but data sent isn't encrypted in transit.
What is an SSL certificate?
A credential that enables encrypted HTTPS connections for your domain.
How do I fix mixed content warnings?
Update all internal links, images, and scripts to load via HTTPS.
Does NameSilo sell SSL certificates?
Yes, for any plan; Turbo hosting also includes SSL free.
.png&w=2048&q=75)
NameSilo StaffThe NameSilo staff of writers worked together on this post. It was a combination of efforts from our passionate writers that produce content to educate and provide insights for all our readers.
More articleswritten by NameSilo
.png&w=3840&q=75)
.png&w=3840&q=75)