The "Not secure" browser warning: what it means for your site - Zephyra Studio
Chrome and other browsers clearly warn visitors when a site does not have HTTPS, "Not secure" appears right next to the address, before the visitor even sees the content. For a site with a contact form or payments, that warning alone is enough for a large share of visitors to leave without reading further.
What HTTPS actually does
HTTPS encrypts the data travelling between a visitor's browser and the server, a name, an e-mail, a message from a contact form, a card number. Without it, that data travels in a form that can theoretically be intercepted along the way, and browsers today openly flag that to the visitor.
This is not just a technical detail, Google directly uses HTTPS as a ranking factor, so a site without it carries an SEO disadvantage too, not just a trust problem.
Why there is almost never a good reason for it today
Free SSL certificates (Let's Encrypt and similar) have existed for years, and most hosting includes them automatically today, at no extra cost. A site without HTTPS in 2026 almost always means the setup was simply forgotten or never done, not that it was expensive or difficult.
Mixed content, a less obvious version of the problem
Even with HTTPS enabled, a site can still load some content (images, scripts) over the old, unencrypted HTTP, this is called mixed content, and the browser still shows a warning even though the main certificate is valid. This is easy to miss because the site "looks" secure at a glance.
Source
Key takeaways
- HTTPS encrypts data from forms and payments, without it the browser openly warns the visitor.
- Google uses HTTPS as a ranking factor, so missing it is both a technical and an SEO problem.
- Free certificates have been the standard for years, a site without HTTPS is almost always an oversight, not a cost issue.
Conclusion
If you are not sure whether your site has HTTPS correctly set up on every page, not just the homepage, that is something we check as a standard part of every site we build.
Frequently asked questions
Chrome and other browsers clearly warn visitors when a site does not have HTTPS, "Not secure" appears right next to the address, before the visitor even sees the content. For a site with a contact form or payments, that warning alone is enough for a large share of visitors to leave without reading further.