Chrome’s “Not secure” label means the page is using an unencrypted HTTP connection. The more serious “Your connection is not private” screen means Chrome could not validate the site’s HTTPS certificate. Do not enter passwords, payment details or other sensitive information until you identify the cause. Work through the checks below in order: sign in to a captive Wi‑Fi portal, correct your device clock, test Incognito, update the operating system, check HTTPS-scanning security software, and involve your network administrator or the website owner when the fault is outside your device.
What Chrome’s warning actually means
Chrome uses HTTPS certificates to authenticate a website and encrypt the connection between your browser and that site. When the address bar says Not secure or shows an information icon, the page is not using a private HTTPS connection. Information you send or receive could potentially be viewed or changed while it travels across the network. The website operator must deploy HTTPS to remove that warning.
As an Amazon Associate I earn from qualifying purchases.
A full-page interstitial headed Your connection is not private is different. Chrome has found a problem with the certificate, the network, or your device and cannot establish the trusted HTTPS connection it expects. Common codes include NET::ERR_CERT_DATE_INVALID, NET::ERR_CERT_AUTHORITY_INVALID, ERR_CERT_COMMON_NAME_INVALID, NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM and ERR_CERTIFICATE_TRANSPARENCY_REQUIRED.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Do not continue to a warning page for banking, shopping, work accounts, email or any other service that handles personal information. A red Dangerous warning is a separate, stronger signal that Chrome has flagged the page as unsafe.
#1 Best Overall
- SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows (Windows 7 with Service Pack 1, Windows 8, Windows 8.1, Windows 10, and Windows 11), Mac OS (Yosemite 10.10 or later), iOS (11.2 or later), and Android (5.0 or later). Organize and keep your digital life safe from hackers
- SAFE ONLINE BANKING: A unique, dedicated browser secures your online transactions; Our Total Security product also includes 200MB per day of our new and improved Bitdefender VPN
- ADVANCED THREAT DEFENSE: Real-Time Data Protection, Multi-Layer Malware and Ransomware Protection, Social Network Protection, Game/Movie/Work Modes, Microphone Monitor, Webcam Protection, Anti-Tracker, Phishing, Fraud, and Spam Protection, File Shredder, Parental Controls, and more
- ECO-FRIENDLY PACKAGING: Your product-specific code is printed on a card and shipped inside a protective cardboard sleeve. Simply open packaging and scratch off security ink on the card to reveal your activation code. No more bulky box or hard-to-recycle discs. PLEASE NOTE: Product packaging may vary from the images shown, however the product is the same.
Why certificates matter
A certificate binds a website name to a cryptographic identity and has a defined validity period. Chrome checks the name in the certificate against the hostname in the address bar, verifies that the certificate dates are valid, and attempts to build a chain to a trusted certificate authority. It can also require modern signing methods and certificate-transparency evidence. A failure in any of those checks can produce the interstitial even when the site itself is legitimate.
The small Not secure label is therefore not the same as proof of malware. It tells you that the connection lacks the privacy protections HTTPS is intended to provide. The full-page warning means Chrome cannot verify the HTTPS connection it was asked to make. In both cases, pause before entering confidential information, but troubleshoot the cause rather than assuming every warning has the same source.
First identify where the warning appears
The pattern often tells you whether to troubleshoot your device, your network or the website itself. Record the exact wording and code before changing anything.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →| What you observe | Most likely area | First check |
|---|---|---|
| Only one website shows the warning, while other HTTPS sites work | That site’s certificate or HTTPS configuration | Check the exact error code and contact the site owner if the problem persists |
| Many reputable sites fail on one computer | Device clock, operating-system trust data, an extension or HTTPS-scanning security software | Verify the clock, test Incognito and review security-software HTTPS settings |
| Many sites fail on every device connected to one Wi‑Fi network | Captive-portal login, proxy or network interception | Open an ordinary HTTP page and complete the network sign-in; then ask the network administrator if needed |
| The problem occurs only on a café, hotel, airport or other public network | Wi‑Fi sign-in portal | Visit http://example.com and finish the portal authentication |
| Incognito works but a normal window does not | Extension or profile setting | Disable extensions one at a time and retest |
| A work-managed computer shows an authority or proxy error | Enterprise HTTPS interception or a missing administrator certificate | Contact IT; do not install a certificate on your own |
Fix Chrome’s certificate warning step by step
1. Complete a public Wi‑Fi sign-in portal
Hotels, airports, cafés and other guest networks often intercept the first web request and redirect it to a page where you accept terms or enter a room, ticket or access code. Before that login is complete, Chrome may report a certificate or connection error because the network has not yet provided normal internet access.
- Connect to the Wi‑Fi network.
- Open a new tab and visit
http://example.com, an ordinary HTTP address. - Follow the network’s sign-in or acceptance page. Enter credentials only on the portal you expected to see.
- After the portal confirms access, close the tab and retry the original HTTPS site.
If the HTTP page never redirects, disconnect and reconnect to Wi‑Fi, or ask the venue’s staff for the correct sign-in process. Do not treat a portal redirect as proof that the original HTTPS site is safe; it only completes network access.
2. Correct the device date, time and time zone
Certificates are valid only between their stated start and expiry dates. If your computer or phone clock is ahead or behind, Chrome can reject an otherwise valid certificate and show “Your clock is behind,” “Your clock is ahead” or NET::ERR_CERT_DATE_INVALID.
Rank #2
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download] | Includes Scam Protection, Advanced VPN, Dark Web Monitoring, & PC Cloud Backup](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
- Open your device’s date-and-time settings.
- Turn on the option to set the time automatically.
- Turn on automatic time-zone selection when available, or choose the time zone that matches your location.
- Confirm that the displayed date, time and time zone are correct, then restart Chrome.
On Windows, these controls are under Settings → Time & language → Date & time. On macOS, open System Settings → General → Date & Time. If the clock repeatedly changes after a restart, the device may have a hardware clock or management problem; have the computer serviced or contact your administrator rather than repeatedly bypassing certificate errors.
Recommended Free Tools
3. Test the page in an Incognito window
Incognito starts a temporary browsing session with extensions disabled by default. If the site works there, an installed extension or a normal-profile setting is a likely cause.
- In Chrome, open the three-dot menu and choose New Incognito window, or press
Ctrl+Shift+Non Windows orCommand+Shift+Non macOS. - Visit the same address without copying a warning-page bypass.
- If it loads normally, return to a regular window and open Menu → Extensions → Manage extensions.
- Turn off one extension, reload the site, and note the result. Repeat one at a time until the problem returns or disappears.
- Remove an extension only if you no longer need it or its publisher cannot explain the HTTPS behavior. Re-enable unrelated extensions after testing.
If Incognito fails in exactly the same way, extensions are less likely to be responsible; continue with the network and certificate checks.
4. Update the operating system
Chrome relies partly on the operating system’s certificate and trust components. An outdated Windows, macOS or other device system can lack current trust information or contain fixes needed for modern certificate validation.
- Save your work and open the operating system’s update settings.
- Install pending security and quality updates, following any restart instructions.
- After restarting, open Chrome and test the site again in a normal window.
On a managed work device, updates may be controlled by IT. Do not remove management software or install unofficial certificate packages to force a result.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors5. Check HTTPS scanning in security software
Some antivirus products inspect encrypted traffic by inserting themselves between Chrome and the website. If that inspection component presents a certificate Chrome does not trust, you may see NET::ERR_CERT_AUTHORITY_INVALID or another certificate error even though the website is correctly configured.
Rank #3
![Norton 360 Premium 2027 Antivirus, 10 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41JNWru8mYL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 10 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
- Open the security product’s settings and look for a feature named HTTPS scanning, encrypted-connection scanning, SSL inspection or similar.
- Temporarily disable only that feature for diagnosis. Keep the rest of the product’s protection active.
- Close and reopen Chrome, then test the same site.
- If the warning disappears, follow the product’s documented method for updating its certificate or configuring encrypted-traffic inspection. If no supported configuration exists, ask the vendor or replace the setting.
- Turn HTTPS scanning back on unless you have completed a supported, understood configuration. Never leave security protection disabled as a permanent “fix.”
A result that changes after this test identifies an interception conflict; it does not prove that the site is malicious or that the security product is defective.
6. Handle a work or school proxy correctly
Organizations may route HTTPS traffic through a proxy that inspects connections. Products such as Zscaler, Palo Alto Networks or Fortinet can be part of that setup. If the proxy’s certificate is missing, expired or not trusted by the device, Chrome may report NET::ERR_CERT_AUTHORITY_INVALID.
- Note the exact code, the network name and whether the failure occurs only on the managed network.
- Send those details to your help desk or network administrator.
- Ask whether the organization’s proxy certificate or trust policy has changed.
- Install a certificate only when the administrator supplies it through an approved process and supports the deployment.
Chromium warns: “Warning: You should never install a root certificate without careful consideration to the impact this might have on your privacy and security.” A root certificate can allow its holder to inspect encrypted traffic, so downloading one from a random website or forum is not a harmless troubleshooting step.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 117. Contact the website owner when the fault is site-specific
If your clock is correct, other HTTPS sites work and the warning follows one domain across different networks, the operator must repair the site. Typical operator-side causes include an expired certificate, a certificate issued for a different hostname, an untrusted issuer, weak signing settings or an incomplete HTTPS deployment.
- Capture the exact hostname and Chrome error code. Do not send passwords or other private data in a support request.
- Try the address with and without the
wwwsubdomain only if the site owner documents both forms; a different hostname can legitimately have a different certificate. - Contact the site through a known-good channel, such as its published support address or account help page.
- Wait for the operator to renew or correctly install the certificate. Do not use the site for sensitive activity while the warning remains.
What the main Chrome error codes mean
| Code or message | Meaning | What to investigate |
|---|---|---|
NET::ERR_CERT_DATE_INVALID |
The certificate dates are outside the valid period according to Chrome. | Check your device clock first. If it is correct, the website certificate may be expired or not yet valid. |
NET::ERR_CERT_AUTHORITY_INVALID |
Chrome cannot build a trusted chain from the presented certificate to an authority it recognizes. | Look for an enterprise proxy, security-software interception or a locally untrusted issuer. The site operator may also have installed the chain incorrectly. |
ERR_CERT_COMMON_NAME_INVALID |
The certificate name does not match the hostname you requested. | Treat it as a site-configuration or interception problem. Check for a mistyped address and then contact the operator or administrator. |
NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM |
The certificate uses a signature method Chrome considers too weak. | The website operator must replace or reconfigure the certificate; do not weaken browser security to continue. |
ERR_CERTIFICATE_TRANSPARENCY_REQUIRED |
Chrome requires evidence that the certificate was publicly logged according to certificate-transparency rules. | Report the error to the site owner or certificate administrator so the certificate can be reissued correctly. |
| Your connection is not private | Chrome could not establish the expected trusted HTTPS connection. | Use the troubleshooting sequence above and avoid entering sensitive information until the cause is known. |
Use the scope of the failure to choose the next move
Only one site fails everywhere
Test the domain from another trusted network, without attempting to bypass the interstitial. If the same code follows the domain while other sites work, report it to the site owner. A name mismatch, expiry or broken certificate chain cannot be repaired in your Chrome settings.
Many sites fail on one device
Start with the clock, then Incognito and operating-system updates. If the issue changes when HTTPS scanning is disabled, restore protection and use the security product’s supported certificate configuration. Repeated failures after those checks justify help from the device administrator or a qualified technician.
Rank #4
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Many devices fail on one network
Complete the captive-portal login first. If there is no portal, the network may be filtering or intercepting HTTPS. On a personal network, contact the provider or router administrator; on a work or school network, contact IT. Do not install an unapproved root certificate just to make the warning disappear.
Read the warning details safely
Chrome’s advanced details can help you report the problem accurately, but they are not an invitation to override the protection. Write down the domain exactly as shown, including any subdomain, and copy the complete error code. Note whether the address starts with http:// or https://, which Wi‑Fi or wired network you used, and whether another device sees the same result. These observations distinguish a hostname mismatch from a clock problem or a network proxy.
Do not assume that changing from one hostname to another fixes the certificate. For example, www.example.com and example.com can be covered by different certificates or different server configurations. Use only the address published by the service, and reach support through a known-good page or contact method rather than through links on the warning screen.
Shortcuts that are unsafe or unreliable
- Do not type a hidden override, click through a certificate interstitial or add a browser exception when you do not understand the cause.
- Do not download a “root certificate” from a search result, forum or file-sharing page.
- Do not permanently disable Chrome security checks or HTTPS-scanning protection.
- Do not assume that a familiar brand name makes an unencrypted page safe for passwords or payment information.
- Do not infer that every warning is caused by malware. Clock errors, captive portals, proxies and website misconfiguration are common explanations.
Verify the repair
- Close the failing tab and open a fresh normal Chrome window.
- Confirm that the address begins with
https://and that Chrome no longer displays the warning. - Test another reputable HTTPS site to ensure the fix did not work only for one page.
- If the original site still fails, record its exact code and the network and device conditions, then send that information to the site owner or administrator.
As an optional shortcut for non-driver Windows causes, Outbyte PC Repair can attempt fixes for more than 100 common issues, including broken system elements and shared DLL problems, while also checking settings and temporary files. It runs on Windows 11, 10, 8 and 7 and offers a free trial by category for at least two days before a subscription; results vary, it complements antivirus software rather than replacing it, and no tool repairs every crash.
Frequently Asked Questions
How do I fix Chrome saying my connection to this site is not secure?
First determine whether the warning affects one site, one network or many sites. Complete any public Wi‑Fi portal login, set the device clock automatically, test the address in Incognito, install operating-system updates, and check HTTPS scanning in security software. If the warning follows one domain, contact that site’s operator; if it appears on a managed network, contact IT.
Why does Chrome say my connection is not private?
Chrome could not validate the HTTPS certificate or the connection was altered by a network, proxy or security product. The certificate may be expired, issued for another hostname, signed by an untrusted authority or otherwise incompatible with Chrome. A wrong device clock can create the same result.
What does NET::ERR_CERT_DATE_INVALID mean?
Chrome believes the certificate is outside its valid date range. Check the computer or phone date, time and time zone first. If they are correct, the website certificate may be expired or not yet valid, and the site owner must correct it.
Best Value
- POWERFUL, LIGHTNING-FAST ANTIVIRUS: Protects your computer from viruses and malware through the cloud; Webroot scans faster, uses fewer system resources and safeguards your devices in real-time by identifying and blocking new threats
- IDENTITY THEFT PROTECTION: Protects your usernames, account numbers and other personal information against keyloggers, spyware and other online threats targeting valuable personal data
- REAL-TIME ANTI-PHISHING: Proactively scans websites, emails and other communications and warns you of potential danger before you click to effectively stop malicious attempts to steal your personal information
- ALWAYS UP TO DATE: Webroot scours 95% of the Internet three times per day including billions of web pages, files and apps to determine what is safe online and enhances the software automatically without time-consuming updates
What does NET::ERR_CERT_AUTHORITY_INVALID mean?
Chrome cannot connect the presented certificate to a trusted certificate authority. An enterprise proxy, HTTPS-scanning antivirus product, locally untrusted issuer or incorrectly installed site certificate can cause it. Do not install a root certificate unless an administrator provides and supports it.
Can a Wi‑Fi login page cause this warning?
Yes. Public networks may intercept the first request until you accept terms or enter an access code. Visit http://example.com, complete the expected portal login, then retry the HTTPS site. Portal access does not make an unrelated warning page safe.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Should I disable antivirus HTTPS scanning permanently?
No. You may disable only the HTTPS-scanning feature briefly to diagnose an interception conflict while leaving other protection active. If that changes the result, use the vendor’s supported certificate or inspection configuration and restore protection.
Is it safe to install a certificate from a website or forum?
No. A root certificate can let its holder inspect encrypted traffic. Install one only when your employer, school or security vendor supplies it through an approved process and explains why it is required. Chromium warns: “Warning: You should never install a root certificate without careful consideration to the impact this might have on your privacy and security.”
How do I remove the Not secure warning from my site?
A site owner must deploy HTTPS correctly, use a certificate covering the exact hostname, keep it within its valid dates, provide a trusted certificate chain, use an accepted signing method and meet certificate-transparency requirements. Browser settings cannot repair an expired or mismatched site certificate.
The Bottom Line
“Not secure” means the page is using HTTP rather than a private HTTPS connection; “Your connection is not private” means Chrome cannot validate the expected secure connection. Do not bypass the warning. Check a captive portal, device clock, Incognito extensions, operating-system updates and HTTPS-scanning software in that order. Then involve IT for managed proxies or the website owner for an expired, mismatched or otherwise broken certificate.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
