Google Warns: Secure Your Site By October or Else…
Home
What’s New
Start Here
Contact
Create a Website Blog
Google Warns: Secure Your Site By October or Else…
Filed Under: New
62 Comments
If you don’t want the Chrome browser scaring your visitors away, here’s what you need to know…
- Pages with Forms: Ensure all pages containing form fields start with
https://instead ofhttp://. This encrypts data submitted through your website’s forms. - Google Chrome Warning: Starting in October 2017, if your site doesn’t use encryption, Chrome will display a "NOT SECURE" message to users. Even email opt-in forms will be affected.
Don’t Be Afraid to Ask for Help
Let me begin by saying this: if technical details make you uneasy, reach out to your host for assistance. They might have even better suggestions tailored to your situation. I’ll be emphasizing this throughout this post, as the best approach depends on your hosting.
Did You Receive This Email?
If you have a Google Webmaster account and your site isn’t secure yet, you might have received an email similar to this one: It lists all pages that will display a "NOT SECURE" warning in October.
Encryption Methods
- Free Encryption: Many hosting plans offer free AutoSSL. Check with your host if they provide this. Installation typically takes just minutes.
- For WordPress, the Real Simple SSL plugin can instantly redirect pages from
http://tohttps. - Alternatively, you can manually set up redirects using a
.htaccessfile.
- For WordPress, the Real Simple SSL plugin can instantly redirect pages from
- Let’s Encrypt: A free and open certificate authority that provides SSL certificates for free (but requires manual installation). Hosts supporting Let’s Encrypt are listed here.
Important Note: Always backup your site and database before making changes.
Host Support:
- Website Palace (GoDaddy) can use Let’s Encrypt but it’s a manual install; contact their support for guidance.
Why Let’s Encrypt Isn’t Widespread:
Hosting companies often push paid SSL certificates, so money plays a role. However, AutoSSL and Let’s Encrypt are becoming more widely available among hosts.
