Browsers now warn visitors when a site is not secure. Chrome shows Not secure in the address bar for HTTP pages, especially on forms. That warning scares customers away, especially when they are about to enter a phone number or address. HTTPS is also a confirmed ranking signal. Checking your setup properly takes a minute.
What is HTTPS
HTTPS is the secure version of HTTP. It encrypts the connection between a visitor and your website using an SSL or TLS certificate. Today free certificates are available from Cloudflare, Let's Encrypt and most hosting providers, so there is no reason to stay on HTTP.
What our checker tests
The HTTPS Checker checks:
- HTTPS works and returns a normal status
- HTTP redirects to HTTPS automatically
- The redirect is permanent, a 301 or 308
- HSTS header which tells browsers to always use HTTPS
- Mixed content where scripts, styles, images or iframes still load over http
You get a security score and a list of any insecure resources.
How to use it
- Open the HTTPS Checker.
- Enter your domain.
- Click Check HTTPS.
- Fix any failed checks.
How to fix common problems
- No HTTP to HTTPS redirect: enable Always Use HTTPS in Cloudflare or add a redirect rule in your hosting panel.
- 302 instead of 301: change the rule to a permanent redirect so ranking signals pass properly.
- Missing HSTS: add the Strict-Transport-Security header once you are sure everything works on HTTPS.
- Mixed content: update old image and script links from http to https, or use relative URLs. Old WordPress posts often contain hard coded http image links.
Why mixed content matters
If an HTTPS page loads images or scripts over HTTP, browsers may block them or show a warning. Blocked scripts can break forms, menus or payment buttons. Mixed content usually comes from old posts, theme settings or third party widgets.
After moving to HTTPS
When you switch to HTTPS, update your sitemap, canonical tags and internal links to the HTTPS versions. Check that redirects work in one hop with the URL Redirect Checker. Then confirm everything with the Technical SEO Checker.
A real example
A small online shop had installed an SSL certificate, so the padlock appeared when customers typed https. But the http version still loaded without redirecting, and most visitors arrived through old http links shared on Facebook. Those visitors saw Not secure on the checkout page. The checker flagged both the missing redirect and several product images loading over http. After enabling the redirect and updating image links, the warning disappeared and abandoned checkouts dropped.
Renewal and expiry
Free certificates usually renew automatically every few months. If automatic renewal fails, your site suddenly shows a scary security warning to every visitor. If you manage your own server, set a reminder to check the certificate date in your browser once a month, or use a provider like Cloudflare that handles renewal for you.
HTTPS for every subdomain
If you use subdomains such as shop or blog, make sure each one also works on HTTPS and redirects properly. Visitors often move between them, and one insecure subdomain can break the trust you built on the main site.
Frequently asked questions
Is HTTPS a ranking factor
Yes, a light one, but it strongly affects trust and conversions.
Does the checker show certificate details
It confirms HTTPS works and checks redirects and headers. Certificate expiry details are shown in your browser or hosting panel.
Is a free SSL certificate good enough
Yes. Free certificates provide the same encryption as paid ones.
Secure your site now with the free HTTPS Checker.