How to Fix Not Using HTTPS
What it is
HTTPS is the secure version of HTTP. It encrypts the connection between a visitor and your site, and browsers show a padlock.
Why it matters
- Browsers often label plain HTTP sites as "Not secure", which can worry visitors.
- Encryption helps protect information sent between visitors and your site.
- Most hosts now offer free certificates.
How to fix it
- Get an SSL/TLS certificate (often free, such as Let's Encrypt, from your host).
- Install it and enable HTTPS.
- Redirect all http:// addresses to https://.
- Update internal links and images that still use http://.
- Re-scan to confirm.
Platform tips
| WordPress | Enable SSL in your hosting panel, then set both URLs in Settings > General to https://. A plugin such as Really Simple SSL can help. |
|---|---|
| Wix | Wix provides SSL automatically: Settings > Advanced > SSL. |
| Squarespace | Squarespace: Settings > Domains > SSL and security > Secure. |
| Shopify | Shopify provides free SSL; Settings > Domains > ensure SSL is active and redirect is on. |
| Plain HTML | Install a certificate with your host and add a server redirect from http to https. |
Related guides
Disclaimer: This guide is general, informational advice only and is not legal, medical, financial, compliance or professional advice. Menu names on platforms change over time; check the platform's own help if something looks different.