Browsers show "Not secure" when your website isn't using a valid SSL certificate, or when a page served over https still loads some images, scripts or forms over plain http. Customers see it next to your address, many leave, and contact forms and checkouts may stop working. The fix is a valid certificate that renews itself and every page forced onto https.
The usual causes
- Expired certificate: often renewed by hand and forgotten.
- No certificate on the domain or the www version.
- Mixed content: old links to http images or scripts in the page.
- Wrong domain: the certificate covers
wwwbut not the bare domain, or the other way round.

How to fix it
- Install a free, auto-renewing certificate through your host (most offer Let's Encrypt) or your platform.
- Make sure it covers both the bare domain and www.
- Redirect all http traffic to https.
- Update old http links in the content and theme.
We fix certificates, redirects and mixed content on a same-day call.



