How Do I Fix “Not Secure” on My Website?

Answered by Arslan Ijaz, Survyc

Updated November 11, 2026

1 min read

Short answer

To fix "Not Secure" on your website, install an SSL certificate (most hosts offer a free one), change your WordPress Address and Site Address to https, redirect every http page to https, and replace any images or scripts that still load over http. The warning usually disappears once all four are done.

Why does my website say “Not Secure”?

The page loads over http instead of https, the SSL certificate is missing or expired, or an https page still loads an image or script over http. That last one is called mixed content.

How do I fix it?

Turn on the free Let’s Encrypt certificate in your hosting panel, covering both www and non-www.
In WordPress, go to Settings, General, and change both addresses to https://. Back up first.
Turn on “Force HTTPS” in your host, or add a 301 redirect from http to https.
Find mixed content in Chrome DevTools, Security panel, and update those file URLs.
Check your main pages and contact form in a private window.

Warning back after a few weeks? The certificate is not renewing. Our website repair services fix SSL problems on a staging copy first.

Recommended services

Website repair servicesSite down, hacked, or broken after an update? Emergency help 24/7.Learn more →WordPress securityFirewall, login protection, and plugin vulnerability checks.Learn more →WordPress maintenanceUpdates tested on staging, restore-tested backups, and monitoring.Learn more →