Chrome Will Mark All HTTP Sites as “Not Secure” Starting in July 2018

Do you own a website that still hasn’t moved to HTTPS? Google Chrome is giving you until July 2018 before its “Not secure” warning appears on every HTTP page.

The Goal: Helping Users Feel Safer Online

It’s no secret that Google wants Chrome to help build a more secure web. Naturally, that means favoring HTTPS over HTTP.

With that in mind, Chrome has for some time labeled HTTPS sites as “Secure,” next to a closed padlock in the address bar.

January 2017: Step One

That label told users when they were on a secure site, but nothing really warned them when they were browsing one that wasn’t. That’s why, in January 2017, Chrome started marking HTTP pages that collect sensitive information, such as passwords or credit card details, as “Not secure.”

July 2018: Step Two

That was only a first step, and Google never hid its plan to go further.

Chrome will now apply the same “Not secure” label to every HTTP page, whether or not it handles sensitive data. The move isn’t really a surprise, but we now know when it takes effect: starting in July 2018, with the release of Chrome 68.

If you haven’t done it yet, you have a few months left to migrate your website from HTTP to HTTPS.

Where Things Stand in 2026

Chrome 68 shipped in July 2018 with the “Not secure” warning for all HTTP pages. Google then removed the “Secure” label for HTTPS sites in Chrome 69, since secure connections had become the norm, and in 2023 it replaced the padlock icon with a neutral settings icon. Google Search Console has also added an HTTPS report that shows which of your indexed pages are still served over HTTP.

Need Help Moving to HTTPS?

Not sure how to migrate without hurting your rankings? Référenceur is a digital marketing agency from Belgium and Luxembourg whose French- and English-speaking team works with U.S. businesses remotely on web design and technical SEO. Get a free assessment.