{"id":6050,"date":"2026-10-23T04:30:00","date_gmt":"2026-10-23T04:30:00","guid":{"rendered":"https:\/\/www.hostkarle.in\/blog\/?p=6050"},"modified":"2026-10-23T04:30:00","modified_gmt":"2026-10-23T04:30:00","slug":"fix-not-secure-website-chrome","status":"publish","type":"post","link":"https:\/\/www.hostkarle.in\/blog\/fix-not-secure-website-chrome","title":{"rendered":"How to Fix Not Secure Website in Chrome"},"content":{"rendered":"\n<p>How to fix not secure website in Chrome starts with finding out whether your site has no valid SSL certificate, is still loading over HTTP, or has mixed content. This practical guide shows you how to issue free SSL in DirectAdmin, force HTTPS, correct WordPress URLs and verify the result.<\/p>\n\n\n\n<aside class=\"ap-card\" aria-label=\"HostKarle Basic (DirectAdmin shared hosting)\">\n<span class=\"ap-card__badge\">Recommended<\/span>\n<div class=\"ap-card__body\"><p class=\"ap-card__name\">HostKarle Basic (DirectAdmin shared hosting)<\/p><p class=\"ap-card__best\">Best for one website: a small business, portfolio, tuition centre or a student&#x27;s first WordPress blog<\/p><ul class=\"ap-card__features\"><li>1 website, 70 GB pure SSD storage<\/li><li>Unlimited bandwidth (fair use)<\/li><li>10 business email accounts, 2 MySQL databases, 10 subdomains<\/li><li>Free auto-renewing Let&#x27;s Encrypt SSL<\/li><li>DirectAdmin panel + Softaculous one-click WordPress<\/li><li>Renews at the price you sign up at<\/li><\/ul><\/div>\n<div class=\"ap-card__side\"><p class=\"ap-card__price\">\u20b999\/mo <small><\/small><\/p><a class=\"ap-card__btn\" href=\"https:\/\/my.hostkarle.in\/cart.php?a=add&amp;pid=153&amp;billingcycle=annually&amp;currency=2\">Get started \u2192<\/a><\/div>\n<\/aside>\n\n\n\n<h2 class=\"wp-block-heading\">Before you start: what you need<\/h2>\n\n\n\n<p>Keep these details ready before changing anything:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Access to your hosting account&#8217;s DirectAdmin panel.<\/li>\n\n\n<li>The domain you want to secure, including whether visitors use <code>www<\/code> or the non-<code>www<\/code> version.<\/li>\n\n\n<li>Access to WordPress admin, or FTP\/file-manager access if WordPress is currently inaccessible.<\/li>\n\n\n<li>A recent backup or a self-service backup point before changing URLs or database values.<\/li>\n\n<\/ul>\n\n\n\n<p>Make sure the domain already points to the hosting account. A certificate authority must confirm that you control the domain before it can issue a certificate. If your DNS still points to an old website, certificate issuance may fail or the certificate may be issued for a different destination.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why Chrome says \u201cNot Secure\u201d<\/h2>\n\n\n\n<p>Chrome uses HTTPS certificates to authenticate a website and protect the connection. A plain <code>http:\/\/<\/code> page does not provide that protection, so Chrome can label it \u201cNot secure\u201d. Chrome also shows stronger warnings for certificate problems or sites identified as unsafe by Safe Browsing; those are different problems from an ordinary HTTP page. See <a href=\"https:\/\/support.google.com\/chrome\/answer\/95617\" target=\"_blank\" rel=\"noopener\">Google&#8217;s explanation of Chrome security indicators<\/a> when the message does not match the examples here.<\/p>\n\n\n\n<p>The common causes are:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>The website has no SSL certificate.<\/li>\n\n\n<li>The certificate is expired, invalid, or issued for another hostname.<\/li>\n\n\n<li>The certificate exists, but HTTP still loads because HTTPS redirection is not enabled.<\/li>\n\n\n<li>The main page uses HTTPS but images, stylesheets, scripts or fonts still use <code>http:\/\/<\/code>. This is called mixed content.<\/li>\n\n<\/ol>\n\n\n\n<p>You normally fix these in order: certificate, redirect, WordPress URLs, then individual mixed-content references.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 1: Issue a free SSL certificate<\/h2>\n\n\n\n<p>Why this matters: HTTPS cannot work correctly until the certificate matches the domain that visitors open.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>Sign in to DirectAdmin for your hosting account.<\/li>\n\n\n<li>Open <strong>SSL Certificates<\/strong> at User Level. Depending on the DirectAdmin skin, this may be under <strong>Account Manager<\/strong>.<\/li>\n\n\n<li>Open the ACME or free-certificate option.<\/li>\n\n\n<li>Select the domain you actually use. Include the <code>www<\/code> hostname if visitors can open the website as <code>www.example.com<\/code>.<\/li>\n\n\n<li>Choose the free Let&#8217;s Encrypt certificate option, request or save the certificate, and wait for the panel to finish.<\/li>\n\n\n<li>Open the certificate details and check that the certificate covers the hostname you tested. Do not test <code>www.example.com<\/code> if the certificate only covers <code>example.com<\/code>, or the reverse.<\/li>\n\n<\/ol>\n\n\n\n<p>DirectAdmin supports automatic ACME certificate issuance and renewal when the hosting account has the feature enabled. Its documentation places the user workflow under <strong>User Level \u2192 SSL Certificates<\/strong>, and the domain must be able to complete validation. Read <a href=\"https:\/\/docs.directadmin.com\/webservices\/ssl\/ssl-and-letsencrypt-for-domains.html\" target=\"_blank\" rel=\"noopener\">DirectAdmin&#8217;s ACME documentation<\/a> if the panel labels differ.<\/p>\n\n\n\n<p>Success looks like this: opening <code>https:\/\/example.com<\/code> shows the website instead of a certificate error. The HTTP version may still show \u201cNot secure\u201d at this point; the next step changes that behaviour.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">If certificate issuance fails<\/h3>\n\n\n\n<p>Check these items before trying again:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>The domain&#8217;s A record points to the correct hosting account.<\/li>\n\n\n<li>There is no old or incorrect AAAA record sending IPv6 visitors somewhere else.<\/li>\n\n\n<li>The domain is active in DirectAdmin.<\/li>\n\n\n<li>You selected every hostname that visitors use.<\/li>\n\n\n<li>A CAA record is not blocking the certificate authority you selected.<\/li>\n\n<\/ul>\n\n\n\n<p>Do not keep retrying while DNS points to the wrong service. Correct the DNS first, then request the certificate again.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 2: Force HTTPS in DirectAdmin<\/h2>\n\n\n\n<p>Why this matters: a valid certificate does not automatically stop visitors from opening old HTTP links.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>In DirectAdmin, open <strong>Domain Setup<\/strong> or <strong>Domain Management<\/strong>.<\/li>\n\n\n<li>Select the domain.<\/li>\n\n\n<li>Find <strong>Force SSL with HTTPS redirect<\/strong>, <strong>Force Redirect<\/strong>, or the equivalent SSL redirect setting.<\/li>\n\n\n<li>Enable the HTTPS redirect and save it.<\/li>\n\n\n<li>If the panel asks whether to use the <code>www<\/code> or non-<code>www<\/code> hostname, choose the version you use as the main site address.<\/li>\n\n<\/ol>\n\n\n\n<p>DirectAdmin&#8217;s current documentation describes a user-level <strong>Force SSL with HTTPS redirect<\/strong> setting. It redirects an HTTP request to the matching HTTPS URL, so a page such as <code>http:\/\/example.com\/about<\/code> should become <code>https:\/\/example.com\/about<\/code> rather than only redirecting the home page.<\/p>\n\n\n\n<p>Success looks like this: enter an HTTP URL in a new browser tab, such as <code>http:\/\/example.com\/contact<\/code>, and it changes to the same path beginning with <code>https:\/\/<\/code>. The final page should load without a certificate warning.<\/p>\n\n\n\n<aside class=\"ap-note\"><p>Test both the <code>www<\/code> and non-<code>www<\/code> versions. A certificate and redirect can be correct for one hostname while the other still points to an old destination.<\/p><\/aside>\n\n\n\n<h3 class=\"wp-block-heading\">If your panel has no HTTPS redirect switch<\/h3>\n\n\n\n<p>Ask your hosting provider whether the domain-level DirectAdmin option is enabled. If you manage the site&#8217;s Apache rewrite rules and the panel specifically requires a file-based redirect, add this to the site&#8217;s <code>.htaccess<\/code> file above existing WordPress rules:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>RewriteEngine On\nRewriteCond %{HTTPS} !=on\nRewriteRule ^ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [R=301,L]<\/code><\/pre>\n\n\n\n<p>Use only one main HTTPS redirect method. Two competing redirect rules can create a loop. You can also follow this <a href=\"https:\/\/www.hostkarle.in\/blog\/redirect-http-to-https-using-htaccess\">HTTP-to-HTTPS redirect guide<\/a> for the file-based approach.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 3: Change WordPress to HTTPS<\/h2>\n\n\n\n<p>Why this matters: WordPress may continue generating <code>http:\/\/<\/code> links even after the server has a working certificate.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>Sign in to WordPress.<\/li>\n\n\n<li>Go to <strong>Settings \u2192 General<\/strong>.<\/li>\n\n\n<li>Change <strong>WordPress Address (URL)<\/strong> from <code>http:\/\/example.com<\/code> to <code>https:\/\/example.com<\/code>.<\/li>\n\n\n<li>Change <strong>Site Address (URL)<\/strong> in the same way.<\/li>\n\n\n<li>Save the changes, then sign in again if WordPress asks you to.<\/li>\n\n\n<li>Open the home page and two or three internal pages in a private Chrome window.<\/li>\n\n<\/ol>\n\n\n\n<p>Keep the same hostname while changing the protocol. For example, change <code>http:\/\/www.example.com<\/code> to <code>https:\/\/www.example.com<\/code>; do not also change from <code>www<\/code> to non-<code>www<\/code> unless that is a separate, planned change.<\/p>\n\n\n\n<p>Success looks like this: links generated by WordPress start with <code>https:\/\/<\/code>, the admin area opens at an HTTPS URL, and internal links do not send you back to HTTP.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">If changing the settings locks you out<\/h3>\n\n\n\n<p>Use a file manager or FTP to make a copy of <code>wp-config.php<\/code>, then add these lines above the comment that says WordPress has stopped editing:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>define( 'WP_HOME', 'https:\/\/example.com' );\ndefine( 'WP_SITEURL', 'https:\/\/example.com' );<\/code><\/pre>\n\n\n\n<p>Replace <code>example.com<\/code> with your real domain. These constants override the values in the WordPress database so you can regain access and correct the settings. Remove the temporary constants after confirming that the database values are correct, unless your developer intentionally manages the URLs there.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 4: Fix mixed content in WordPress<\/h2>\n\n\n\n<p>Why this matters: an HTTPS page can still request insecure assets. Chrome may block those requests or show an incomplete security state.<\/p>\n\n\n\n<p>Open the affected page in Chrome, right-click, choose <strong>Inspect<\/strong>, and open the <strong>Console<\/strong> tab. Look for messages containing <code>Mixed Content<\/code> and an <code>http:\/\/<\/code> address. The address in that message usually tells you whether the problem is an image, stylesheet, JavaScript file, font, embedded video or third-party resource.<\/p>\n\n\n\n<p>Fix the reference at its source:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>Replace hard-coded <code>http:\/\/example.com<\/code> image and media URLs with <code>https:\/\/example.com<\/code>.<\/li>\n\n\n<li>Check theme settings, page-builder fields, menus and widgets for old HTTP links.<\/li>\n\n\n<li>Update plugin settings that contain an asset URL or external API URL.<\/li>\n\n\n<li>If many old URLs are stored in the database, use a reputable WordPress search-and-replace tool after taking a backup. Run its dry run first and review the number of replacements.<\/li>\n\n\n<li>Clear the WordPress cache used by your site, then test again in a private window.<\/li>\n\n<\/ol>\n\n\n\n<p>Do not edit serialized database values with a simple text replacement unless your tool understands serialized data. A careless replacement can damage structured WordPress settings. <a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/Security\/Defenses\/Mixed_content\" target=\"_blank\" rel=\"noopener\">MDN&#8217;s mixed-content guidance<\/a> explains why browsers can upgrade some media requests but block other insecure resources.<\/p>\n\n\n\n<p>If you can use WP-CLI, preview a same-domain replacement before applying it:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>wp search-replace 'http:\/\/example.com' 'https:\/\/example.com' --all-tables-with-prefix --skip-columns=guid --dry-run<\/code><\/pre>\n\n\n\n<p>Only run the command without <code>--dry-run<\/code> after checking the preview and confirming that the old and new URLs are correct. Ask your developer or hosting provider if you do not normally use WP-CLI.<\/p>\n\n\n\n<p>Success looks like this: the Console has no mixed-content errors on the tested page, images and styles still load, and the page&#8217;s source contains HTTPS URLs for your own assets.<\/p>\n\n\n\n<p>For broader WordPress hardening after this fix, see <a href=\"https:\/\/www.hostkarle.in\/blog\/secure-wordpress-site-from-hackers\">how to secure a WordPress site without a plugin<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 5: Check the result in Chrome<\/h2>\n\n\n\n<p>Why this matters: checking only the home page can leave an old certificate, redirect or asset problem hidden on another URL.<\/p>\n\n\n\n<p>Run this short test:<\/p>\n\n\n\n<figure class=\"wp-block-table ap-table\"><table><thead><tr><th>Test<\/th><th>What you should see<\/th><\/tr><\/thead><tbody><tr><td><code>https:\/\/example.com<\/code><\/td><td>The correct website loads without a certificate error.<\/td><\/tr><tr><td><code>https:\/\/www.example.com<\/code><\/td><td>The correct site loads, or redirects to your chosen main hostname.<\/td><\/tr><tr><td><code>http:\/\/example.com<\/code><\/td><td>It redirects to the HTTPS version.<\/td><\/tr><tr><td><code>http:\/\/www.example.com<\/code><\/td><td>It redirects to the HTTPS version or your chosen HTTPS hostname.<\/td><\/tr><tr><td>An internal page<\/td><td>The same path remains after redirecting.<\/td><\/tr><tr><td>A page with images and forms<\/td><td>Assets load and forms remain usable.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>In Chrome, select the site information icon at the left of the address bar and open the connection details. The exact icon and wording can change between Chrome versions, but a normal HTTPS connection should not show the ordinary \u201cNot secure\u201d label. Do not confuse a full-page red Safe Browsing warning with an SSL configuration issue; investigate that separately.<\/p>\n\n\n\n<p>You can also use Chrome DevTools&#8217; <strong>Security<\/strong> panel and <strong>Console<\/strong> to find certificate and mixed-content details. Test after clearing only the affected site&#8217;s cached data if an old redirect remains visible.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Still not secure? Check these causes<\/h2>\n\n\n\n<p>If the warning remains, identify the exact URL shown in Chrome before changing more settings.<\/p>\n\n\n\n<figure class=\"wp-block-table ap-table\"><table><thead><tr><th>Symptom<\/th><th>Likely cause<\/th><th>Next check<\/th><\/tr><\/thead><tbody><tr><td>\u201cYour connection is not private\u201d<\/td><td>Expired certificate, wrong hostname, or an untrusted certificate<\/td><td>Open the certificate details and compare the hostname and expiry with the URL.<\/td><\/tr><tr><td>HTTP works but HTTPS fails<\/td><td>Certificate was not issued, or SSL is not enabled for the domain<\/td><td>Return to DirectAdmin&#8217;s SSL Certificates page and request or enable the certificate.<\/td><\/tr><tr><td>HTTPS works but some pages show warnings<\/td><td>Mixed content or an old cached page<\/td><td>Inspect the Console and update the specific <code>http:\/\/<\/code> resource.<\/td><\/tr><tr><td><code>www<\/code> works but the root domain fails<\/td><td>DNS or certificate coverage differs between hostnames<\/td><td>Check both DNS records and include both names when requesting the certificate.<\/td><\/tr><tr><td>The page keeps switching between HTTP and HTTPS<\/td><td>Conflicting WordPress, panel or rewrite settings<\/td><td>Keep one HTTPS redirect, verify both WordPress URL fields, and remove duplicate rules.<\/td><\/tr><tr><td>A red full-page warning appears<\/td><td>Chrome Safe Browsing or another serious browser warning<\/td><td>Do not bypass it; investigate the warning and the site&#8217;s files separately.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>After every change, retest the exact URL that showed the warning. That prevents you from fixing one hostname while assuming that all versions of the site are fixed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Common mistakes to avoid<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Installing a certificate but never enabling an HTTP-to-HTTPS redirect.<\/li>\n\n\n<li>Securing only the home page while internal URLs still use HTTP.<\/li>\n\n\n<li>Changing WordPress to HTTPS before the certificate is ready, then assuming the site is broken.<\/li>\n\n\n<li>Running a database replacement without a backup or dry run.<\/li>\n\n\n<li>Adding several redirect snippets from different tutorials.<\/li>\n\n\n<li>Testing only one browser tab instead of checking both <code>www<\/code> and non-<code>www<\/code> URLs.<\/li>\n\n\n<li>Treating \u201cNot secure\u201d as proof that the website has been hacked. It usually describes the connection or certificate, not the complete state of the site&#8217;s files.<\/li>\n\n<\/ul>\n\n\n\n<p>Once HTTPS is working, review your site&#8217;s performance and asset URLs as part of routine maintenance. This <a href=\"https:\/\/www.hostkarle.in\/blog\/optimize-wordpress-website\">WordPress optimisation guide<\/a> covers the next checks without changing the SSL steps above.<\/p>\n\n\n\n<aside class=\"ap-cta\" aria-label=\"Start with HTTPS hosting\"><div class=\"ap-cta__content\"><p class=\"ap-cta__eyebrow\">Secure your website<\/p><p class=\"ap-cta__title\">Start with HTTPS hosting<\/p><p class=\"ap-cta__text\">Get free auto-renewing SSL, DirectAdmin and WordPress tools for one website.<\/p><\/div><a class=\"ap-cta__btn\" href=\"https:\/\/my.hostkarle.in\/cart.php?a=add&amp;pid=153&amp;billingcycle=annually&amp;currency=2\">Get started<\/a><\/aside>\n\n\n\n<h2 class=\"wp-block-heading\">FAQ<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Does \u201cNot Secure\u201d mean my website is hacked?<\/h3>\n\n\n\n<p>No. It usually means the page is using HTTP, the certificate is invalid, or the page loads an insecure resource. Check the certificate and mixed-content messages first, then investigate the files separately if you see unusual content.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Can a free SSL certificate remove the Chrome warning?<\/h3>\n\n\n\n<p>Yes, when the certificate is valid for the exact hostname and the website actually loads over HTTPS. You must still enable the HTTPS redirect and correct mixed-content URLs in WordPress.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Why does Chrome say \u201cNot Secure\u201d when my site already has HTTPS?<\/h3>\n\n\n\n<p>The certificate may be for another hostname, expired, or not trusted. If the certificate is valid, inspect the page for mixed content and check whether you are viewing an HTTP link or an old cached redirect.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How do I fix \u201cNot Secure\u201d on a WordPress website?<\/h3>\n\n\n\n<p>Issue or renew the certificate in your hosting panel, force HTTPS, then change both WordPress URL fields from HTTP to HTTPS. Finally, inspect the Console and update any theme, plugin, image or stylesheet URL that still begins with <code>http:\/\/<\/code>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Do I need a paid SSL certificate?<\/h3>\n\n\n\n<p>Not for the normal HTTPS connection of a small WordPress website. A free, trusted, automatically renewing certificate is suitable for most sites; the important part is correct hostname coverage, HTTPS redirection and clean site URLs.<\/p>\n\n\n\n{&#8220;@context&#8221;: &#8220;https:\/\/schema.org&#8221;, &#8220;@type&#8221;: &#8220;FAQPage&#8221;, &#8220;mainEntity&#8221;: [{&#8220;@type&#8221;: &#8220;Question&#8221;, &#8220;name&#8221;: &#8220;Does \u201cNot Secure\u201d mean my website is hacked?&#8221;, &#8220;acceptedAnswer&#8221;: {&#8220;@type&#8221;: &#8220;Answer&#8221;, &#8220;text&#8221;: &#8220;No. It usually means the page is using HTTP, the certificate is invalid, or the page loads an insecure resource. Check the certificate and mixed-content messages first, then investigate the files separately if you see unusual content.&#8221;}}, {&#8220;@type&#8221;: &#8220;Question&#8221;, &#8220;name&#8221;: &#8220;Can a free SSL certificate remove the Chrome warning?&#8221;, &#8220;acceptedAnswer&#8221;: {&#8220;@type&#8221;: &#8220;Answer&#8221;, &#8220;text&#8221;: &#8220;Yes, when the certificate is valid for the exact hostname and the website actually loads over HTTPS. You must still enable the HTTPS redirect and correct mixed-content URLs in WordPress.&#8221;}}, {&#8220;@type&#8221;: &#8220;Question&#8221;, &#8220;name&#8221;: &#8220;Why does Chrome say \u201cNot Secure\u201d when my site already has HTTPS?&#8221;, &#8220;acceptedAnswer&#8221;: {&#8220;@type&#8221;: &#8220;Answer&#8221;, &#8220;text&#8221;: &#8220;The certificate may be for another hostname, expired, or not trusted. If the certificate is valid, inspect the page for mixed content and check whether you are viewing an HTTP link or an old cached redirect.&#8221;}}, {&#8220;@type&#8221;: &#8220;Question&#8221;, &#8220;name&#8221;: &#8220;How do I fix \u201cNot Secure\u201d on a WordPress website?&#8221;, &#8220;acceptedAnswer&#8221;: {&#8220;@type&#8221;: &#8220;Answer&#8221;, &#8220;text&#8221;: &#8220;Issue or renew the certificate in your hosting panel, force HTTPS, then change both WordPress URL fields from HTTP to HTTPS. Finally, inspect the Console and update any theme, plugin, image or stylesheet URL that still begins with http:\/\/.&#8221;}}, {&#8220;@type&#8221;: &#8220;Question&#8221;, &#8220;name&#8221;: &#8220;Do I need a paid SSL certificate?&#8221;, &#8220;acceptedAnswer&#8221;: {&#8220;@type&#8221;: &#8220;Answer&#8221;, &#8220;text&#8221;: &#8220;Not for the normal HTTPS connection of a small WordPress website. A free, trusted, automatically renewing certificate is suitable for most sites; the important part is correct hostname coverage, HTTPS redirection and clean site URLs.&#8221;}}]}\n\n","protected":false},"excerpt":{"rendered":"Learn how to fix not secure website in Chrome by issuing free SSL, forcing HTTPS, correcting WordPress mixed content and checking every URL.","protected":false},"author":72952,"featured_media":6049,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"csco_singular_sidebar":"","csco_page_header_type":"","csco_page_load_nextpost":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[20],"tags":[1005,1004,965,1006,377],"class_list":{"0":"post-6050","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-wordpress-tutorials","8":"tag-chrome","9":"tag-https","10":"tag-ssl","11":"tag-website-security","12":"tag-wordpress","13":"cs-entry"},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Fix Not Secure Website in Chrome - HostKarle<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hostkarle.in\/blog\/?p=6050\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Fix Not Secure Website in Chrome - HostKarle\" \/>\n<meta property=\"og:description\" content=\"Learn how to fix not secure website in Chrome by issuing free SSL, forcing HTTPS, correcting WordPress mixed content and checking every URL.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hostkarle.in\/blog\/?p=6050\" \/>\n<meta property=\"og:site_name\" content=\"HostKarle\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-23T04:30:00+00:00\" \/>\n<meta name=\"author\" content=\"Samrat Ghosh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Samrat Ghosh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050\"},\"author\":{\"name\":\"Samrat Ghosh\",\"@id\":\"https:\/\/www.hostkarle.in\/blog\/#\/schema\/person\/b40aa445689703d1039aef8cafe23bf1\"},\"headline\":\"How to Fix Not Secure Website in Chrome\",\"datePublished\":\"2026-10-23T04:30:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050\"},\"wordCount\":2395,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/10\/fix-not-secure-website-chrome.webp?fit=1600%2C900&ssl=1\",\"keywords\":[\"chrome\",\"https\",\"ssl\",\"website-security\",\"wordpress\"],\"articleSection\":[\"Wordpress Tutorials\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.hostkarle.in\/blog\/?p=6050#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050\",\"url\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050\",\"name\":\"How to Fix Not Secure Website in Chrome - HostKarle\",\"isPartOf\":{\"@id\":\"https:\/\/www.hostkarle.in\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/10\/fix-not-secure-website-chrome.webp?fit=1600%2C900&ssl=1\",\"datePublished\":\"2026-10-23T04:30:00+00:00\",\"author\":{\"@id\":\"https:\/\/www.hostkarle.in\/blog\/#\/schema\/person\/b40aa445689703d1039aef8cafe23bf1\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.hostkarle.in\/blog\/?p=6050\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050#primaryimage\",\"url\":\"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/10\/fix-not-secure-website-chrome.webp?fit=1600%2C900&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/10\/fix-not-secure-website-chrome.webp?fit=1600%2C900&ssl=1\",\"width\":1600,\"height\":900,\"caption\":\"A laptop, padlock and certificate connected by a secure HTTPS line on an indigo background.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.hostkarle.in\/blog\/?p=6050#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.hostkarle.in\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Fix Not Secure Website in Chrome\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.hostkarle.in\/blog\/#website\",\"url\":\"https:\/\/www.hostkarle.in\/blog\/\",\"name\":\"HostKarle\",\"description\":\"Hostkarle Blog offer solution for wordpress problems, cPanel issues, And Websites Errors Also You can Learn SEO in Hindi and much more.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.hostkarle.in\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.hostkarle.in\/blog\/#\/schema\/person\/b40aa445689703d1039aef8cafe23bf1\",\"name\":\"Samrat Ghosh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/09\/samrat-ghosh.jpg?fit=300%2C300&ssl=1\",\"url\":\"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/09\/samrat-ghosh.jpg?fit=300%2C300&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/09\/samrat-ghosh.jpg?fit=300%2C300&ssl=1\",\"caption\":\"Samrat Ghosh\"},\"description\":\"Samrat Ghosh writes hands-on guides about web hosting, WordPress, domains and email for Indian small businesses, students and freelancers - the practical documentation he wishes had existed when he set up his first website.\",\"url\":\"https:\/\/www.hostkarle.in\/blog\/author\/samrat\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Fix Not Secure Website in Chrome - HostKarle","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hostkarle.in\/blog\/?p=6050","og_locale":"en_US","og_type":"article","og_title":"How to Fix Not Secure Website in Chrome - HostKarle","og_description":"Learn how to fix not secure website in Chrome by issuing free SSL, forcing HTTPS, correcting WordPress mixed content and checking every URL.","og_url":"https:\/\/www.hostkarle.in\/blog\/?p=6050","og_site_name":"HostKarle","article_published_time":"2026-10-23T04:30:00+00:00","author":"Samrat Ghosh","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Samrat Ghosh","Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050#article","isPartOf":{"@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050"},"author":{"name":"Samrat Ghosh","@id":"https:\/\/www.hostkarle.in\/blog\/#\/schema\/person\/b40aa445689703d1039aef8cafe23bf1"},"headline":"How to Fix Not Secure Website in Chrome","datePublished":"2026-10-23T04:30:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050"},"wordCount":2395,"commentCount":0,"image":{"@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/10\/fix-not-secure-website-chrome.webp?fit=1600%2C900&ssl=1","keywords":["chrome","https","ssl","website-security","wordpress"],"articleSection":["Wordpress Tutorials"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.hostkarle.in\/blog\/?p=6050#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050","url":"https:\/\/www.hostkarle.in\/blog\/?p=6050","name":"How to Fix Not Secure Website in Chrome - HostKarle","isPartOf":{"@id":"https:\/\/www.hostkarle.in\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050#primaryimage"},"image":{"@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/10\/fix-not-secure-website-chrome.webp?fit=1600%2C900&ssl=1","datePublished":"2026-10-23T04:30:00+00:00","author":{"@id":"https:\/\/www.hostkarle.in\/blog\/#\/schema\/person\/b40aa445689703d1039aef8cafe23bf1"},"breadcrumb":{"@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hostkarle.in\/blog\/?p=6050"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050#primaryimage","url":"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/10\/fix-not-secure-website-chrome.webp?fit=1600%2C900&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/10\/fix-not-secure-website-chrome.webp?fit=1600%2C900&ssl=1","width":1600,"height":900,"caption":"A laptop, padlock and certificate connected by a secure HTTPS line on an indigo background."},{"@type":"BreadcrumbList","@id":"https:\/\/www.hostkarle.in\/blog\/?p=6050#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hostkarle.in\/blog"},{"@type":"ListItem","position":2,"name":"How to Fix Not Secure Website in Chrome"}]},{"@type":"WebSite","@id":"https:\/\/www.hostkarle.in\/blog\/#website","url":"https:\/\/www.hostkarle.in\/blog\/","name":"HostKarle","description":"Hostkarle Blog offer solution for wordpress problems, cPanel issues, And Websites Errors Also You can Learn SEO in Hindi and much more.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hostkarle.in\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.hostkarle.in\/blog\/#\/schema\/person\/b40aa445689703d1039aef8cafe23bf1","name":"Samrat Ghosh","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/09\/samrat-ghosh.jpg?fit=300%2C300&ssl=1","url":"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/09\/samrat-ghosh.jpg?fit=300%2C300&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/09\/samrat-ghosh.jpg?fit=300%2C300&ssl=1","caption":"Samrat Ghosh"},"description":"Samrat Ghosh writes hands-on guides about web hosting, WordPress, domains and email for Indian small businesses, students and freelancers - the practical documentation he wishes had existed when he set up his first website.","url":"https:\/\/www.hostkarle.in\/blog\/author\/samrat"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.hostkarle.in\/blog\/wp-content\/uploads\/2026\/10\/fix-not-secure-website-chrome.webp?fit=1600%2C900&ssl=1","jetpack_shortlink":"https:\/\/wp.me\/p99BIJ-1zA","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/posts\/6050","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/users\/72952"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/comments?post=6050"}],"version-history":[{"count":1,"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/posts\/6050\/revisions"}],"predecessor-version":[{"id":6228,"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/posts\/6050\/revisions\/6228"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/media\/6049"}],"wp:attachment":[{"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/media?parent=6050"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/categories?post=6050"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hostkarle.in\/blog\/wp-json\/wp\/v2\/tags?post=6050"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}