Help articles Security

Why Does My Site Show As “Not Secure”?

 

Google recently released an update for their Chrome browser that actively alerts users that a site is not secure when any type of data is entered into a site that does not have a “secure” or encrypted connection. Here’s an example of how that error message may look:

Why am I seeing this?

If you are seeing this on your site, it means that some portion of the content being loaded is coming over without encryption. If any party were to intercept a connection between your site and a visitor, they could see the data being passed back and forth.

Is this a new thing?

Over the past decade, more and more sites have begun implementing SSL certificates on their site to secure information going to and from their site. Think of SSL like a secret decoder pen for your website where everything is being encoded and decoded on the fly. When put in place, your site and your visitors are effectively speaking a secret language.  If anybody tries to snoop in, they won’t understand what’s going on. This has been great for securing websites running e-commerce or collecting form data from users.

Recently, there has been a  push from companies like Google to get every site encrypted with an SSL certificate to protect your privacy and create a more safe and secure web experience for everyone.

What should I do to fix it?

Here’s a helpful checklist to get your connection secure:

1

Make sure you have a valid SSL certificate

In the Flywheel dashboard for your site, navigate to the Add-On’s tab and check to see if you have SSL enabled. If not, we can provide you with one of our free Simple SSL certificates. Alternatively, you can purchase your own certificate for installation.

2

Force HTTPS

Once you have a valid SSL certificate installed, the first thing you’ll want to be sure to do is ‘Force HTTPS’ across your site. To do this, you’ll want to head to the Advanced tab on your Flywheel dashboard and enable the ‘Force HTTPS.’ toggle switch. (This will only appear once you have an installed and active SSL certificate on your site.)

3

Make sure everything is loading via HTTPS

With the ‘Force HTTPS’ option enabled, Flywheel will now redirect all your site’s traffic to load pages over HTTPS, which should ensure that your site is displayed as secure.

If you happen to still see the same warning as before it may be due to your site attempting to serve insecure assets over HTTPS. In order to address this, you’ll need to change the insecure asset links present on your site. Please read our guide here about how to fix insecure assets. 


  • Organizations

    Everything you need to know about managing your team with our Organizations feature.

    8 Articles
  • Blueprints

    Learn everything there is to know about what Blueprints are, how to create them and how to make the best use of them.

    5 Articles
  • Simple SSL

    All there is to know about our free, automatically installed and activated SSL certificates.

    8 Articles
  • Staging

    How to get the most out of Staging, which allows you to duplicate a site, make changes, and then push those changes to the live site.

    6 Articles
  • Local by Flywheel

    Everything you need to know about our amazing, free local WordPress development software for Mac and PC.

    5 Articles
  • White Label

    Everything you need to know about our Whitelabel subscriptions for branding and reselling Flywheel.

    4 Articles
  • Getting started

    Everything you need to know to get your first Flywheel site up and running.

    8 Articles
  • Frequently Asked

    The most commonly asked questions, and a few we just think you should know.

    24 Articles
  • General Questions

    Questions that don't fit elsewhere, or those about Flywheel in general.

    56 Articles
  • Billing & Accounts

    Questions relating to payments, billing and managing your account on Flywheel.

    12 Articles
  • Domain Names

    Details about how to manage DNS and point your domain names at Flywheel.

    10 Articles
  • Database

    How to access your WordPress database to make changes and update content.

    3 Articles
  • Security

    Details about everything Flywheel does to makes your site so secure.

    12 Articles
  • Plugins

    Which plugins work best, which plugins work worst, and everything in between.

    7 Articles

Get in touch with us

Standard support hours are M-F 9am-5pm CDT and 24/7 emergency support.

WordPress experts

Try it yourself. It's free & takes less than 60 seconds. Sign up

× How to manage 50+ WordPress Sites

Here's a free ebook!

How to manage 50+ WordPress Sites