Why Is There No Padlock?

If the address bar shows Not secure instead of a padlock, something is wrong with your site's HTTPS connection. The most common causes and their solutions are below.

Causes and solutions

1. SSL is not installed or has expired

Check the certificate status on the SSL/TLS Certificates page in Plesk. To install a free certificate: Let's Encrypt setup.

2. The site opens with http://

Even with a certificate, no padlock appears if the visitor uses http://. Turn on the HTTP to HTTPS redirect.

3. Mixed content

The page opens with https://, but an image, CSS or JS file inside loads over http://, so the padlock disappears. Update the links to https://; in WordPress a plugin such as Better Search Replace makes this easy.

4. The certificate belongs to another name

If the certificate was issued for yourdomain.com but the site opens as www.yourdomain.com, a warning appears. Make sure the certificate covers both names.

You can see whether your certificate is installed correctly with our SSL Checker.

In the browser console (F12 > Console), the "Mixed Content" warning shows the address of the problem file.