← Back to the security guide
SSL/TLS SecurityHigh risk

No valid SSL certificate detected

What does this mean?

Your website is serving traffic over plain, unencrypted HTTP. That means anything a visitor types into your site — passwords, contact forms, payment information — can potentially be intercepted by anyone else on the same network.

What are the potential impacts?

  • Any information submitted through your site — login credentials, contact form details, payment information — travels in plain text and can be read by anyone on the same network path.
  • Modern browsers actively warn visitors that your site is "Not Secure," which erodes trust before they've even engaged with your content.
  • Search engines factor HTTPS into ranking, so this can also be quietly costing you organic traffic.

How to fix it

Install an SSL certificate through your hosting provider — most hosts now offer a free one (often via Let's Encrypt) that can be enabled with a single click in your hosting dashboard. If you don't see that option, ask your host's support team to enable HTTPS for your domain.

Want to see whether this actually affects your site? Run a free scan — no signup required.

Run a free scan