How to Remove Chrome "This Site is Not Secure" Warning?

Why is the "This Site Not Secure" Warning Shown?

Google Chrome shows "Not secure" warning in the address bar on websites that do not have an SSL certificate or are configured incorrectly. This warning can cause your visitors to leave your site.

All modern browsers such as Chrome, Firefox, Safari and Edge mark sites that do not use HTTPS as unsafe. This situation can have negative consequences not only in terms of security, but also in terms of SEO, conversion rates and brand reputation.

5 Main Reasons for Warning

1. SSL Certificate Not Installed

This is the most common reason. If your site is still serving over the HTTP protocol, the browser will definitely show this warning. The solution is simple: you need to buy anSSL certificate and install it on your server.

2. SSL Certificate Expired

SSL certificates are valid for a certain period of time. The expired certificate is considered invalid by browsers and the warning is triggered. Check your certificate period regularly.

3. Mixed Content Problem

If your HTTPS page contains resources (images, scripts, CSS files) loaded via HTTP, the browser issues a security warning. All resources must be loaded over HTTPS.

4. Certificate Domain Mismatch

If your SSL certificate is issued for www.example.com but your site opens as example.com, a domain mismatch occurs.

5. Missing Certificate Chain

If intermediate certificates are not installed on the server, the browser cannot verify the certificate chain and marks it as insecure.

Step by Step Solution Guide

Step 1: Obtain and Install an SSL Certificate

If you don't have an SSL certificate yet, choose one that suits your needs:

• Personal site/blog: DV SSL is sufficient (usually issued within minutes)
• Business site: Prefer OV SSL (enterprise verification)
• E-commerce: EV SSL offers the most thorough organization validation
• Many subdomains: Protect in a single certificate with Wildcard SSL

Step 2: Perform HTTPS Redirect

Once the certificate is installed, redirect all HTTP traffic to HTTPS. For Apache, add it to your .htaccess file:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Add to your server block for Nginx:

server {
    listen 80;
    server_name example.com www.example.com;
    return 301 https://$server_name$request_uri;
}

Step 3: Fix Mixed Content Issues

Open your browser's developer console (F12) and check for "Mixed Content" warnings. Detect resources loaded via HTTP and update them to HTTPS:

• Update all http:// links in the database to https://
• Fix static URLs in theme and plugin files
• Add <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests"> to your HTML header

Step 4: Complete the Certificate Chain

Upload the CA Bundle (intermediate certificate) file you received from your certificate provider to your server. Verify that your certificate chain is complete with our SSL Checker tool.

Step 5: Add HSTS Header

Force browsers to always use HTTPS by adding the HTTP Strict Transport Security (HSTS) header:

Strict-Transport-Security: max-age=31536000; includesSubDomains; preload

Checklist: Permanently Remove Unsafe Warning

• ✅ Is a valid SSL certificate installed?
• ✅ Is the certificate not expired?
• ✅ Is all HTTP traffic redirected to HTTPS?
• ✅ Is there a mixed content problem? (F12 → Console)
• ✅ Is the certificate chain (CA Bundle) complete?
• ✅ Does the domain name match the certificate?
• ✅ Is the HSTS header active?
• ✅ Are Sitemap and canonical URLs HTTPS?

Quick Check with SSL Checker

DataSSL SSL Checker tool. The tool analyzes certificate duration, chain integrity, protocol versions and security level.

Conclusion

Removing the Chrome "not secure" warning is actually a simple process: get a correct SSL certificate, install it on your server, and set up HTTPS redirection. In most cases these three steps remove the warning. For more comprehensive security, be sure to complete mixed content correction and HSTS settings.

A DV SSL certificate from DataSSL is usually issued within minutes, so you can move your site to HTTPS quickly. Our SSL Certificate Products →