How to Fix 'Not Secure' Warning on a Website (SSL)

🔒Free SSL Checker
Check any site's SSL certificate, expiry date and TLS version.Open tool →

Cause 1: no SSL certificate

The site loads over http:// only. Most hosts (and Cloudflare) offer free Let's Encrypt certificates – turn it on in your hosting panel, then redirect all http:// traffic to https://.

Cause 2: expired certificate

Free certificates renew every 90 days. If auto-renewal broke, visitors see a full-page warning. Run the SSL Checker to see the expiry date and days left, then renew in your hosting panel.

Cause 3: certificate doesn't match the name

A certificate for example.com may not cover www.example.com. The SSL Checker lists every name the certificate covers – add the missing one or redirect to the covered version.

Cause 4: mixed content

The page is HTTPS but loads some images or scripts over http://. Use the Mixed Content Checker to list them, then change those links to https://. On WordPress, update both URLs in Settings > General.

Frequently asked questions

Does HTTPS help SEO?

Yes, it's a Google ranking signal and Chrome labels HTTP pages as not secure.

Is a free SSL certificate good enough?

Yes – Let's Encrypt certificates are trusted by all browsers.

How long does the fix take?

Usually minutes, plus up to a day for DNS or cache changes.