Google Warns: Secure Your Site By October or Else…
Home
What’s New
Start Here
Contact
Create a Website Blog
Google Warns: Secure Your Site By October or Else…
Filed Under: New
62 Comments
If you don’t want the Chrome browser scaring your visitors away, here’s what you need to know…
- Pages with Forms: Ensure all pages containing form fields start with
https://instead ofhttp://. This encrypts data submitted through your website's forms. - Google Chrome Warning: Starting in October 2017, if your site doesn't use encryption, Chrome will display a "NOT SECURE" message to users. Even email opt-in forms will be affected.
Don’t Be Afraid to Ask for Help Let me begin by saying this: if technical details make you uneasy, reach out to your host for assistance. They might have even better suggestions tailored to your situation. I'll be emphasizing this throughout this post, as the best approach depends on your hosting.
Did You Receive This Email? If you have a Google Webmaster account and your site isn't secure yet, you might have received an email similar to this one: It lists all pages that will display a "NOT SECURE" warning in October.
Encryption Methods
- Free Encryption: Many hosting plans offer free AutoSSL. Check with your host if they provide this. Installation typically takes just minutes.
- For WordPress, the Real Simple SSL plugin can instantly redirect pages from
http://tohttps. - Alternatively, you can manually set up redirects using a
.htaccessfile.
- For WordPress, the Real Simple SSL plugin can instantly redirect pages from
- Let’s Encrypt: A free and open certificate authority that provides SSL certificates for free (but requires manual installation). Hosts supporting Let’s Encrypt are listed here.
Important Note: Always backup your site and database before making changes.
Host Support:
- Website Palace (GoDaddy) can use Let’s Encrypt but it's a manual install; contact their support for guidance.
Why Let’s Encrypt Isn't Widespread: Hosting companies often push paid SSL certificates, so money plays a role. However, AutoSSL and Let’s Encrypt are becoming more widely available among hosts.
As of October 2026, Google Chrome will no longer display a “NOT SECURE” warning for sites without HTTPS encryption. This means that if you haven’t secured your site, visitors will be notified of potential security risks. This update underscores the importance of implementing SSL certificates as a standard practice in website security. Google’s push for HTTPS encryption isn’t just about user experience; it’s a critical component of data protection. With the rise in cyber threats, securing your site is no longer an option but an imperative. ## New Considerations for 2026: - **Free Encryption Options:** Many hosting providers now offer free AutoSSL, making it easier than ever to implement HTTPS without additional costs. For WordPress users, plugins like Real Simple SSL can streamline the process. - **Let’s Encrypt Gaining Traction:** This free, open certificate authority is becoming increasingly popular, with a growing number of hosts supporting it. Its manual installation process, however, requires a bit more technical know-how. ## Taking Action: Don’t wait until October. Start securing your site now. Back up your data, consult with your host, and choose the encryption method that best suits your needs. Remember, a secure site is a happy site, and Google’s new policy reinforces that fact. How to Choose the Right SSL Certificate