High impactSecurity
Site Serves HTTP Instead of HTTPS
HTTPS has been a Google ranking signal since 2014. Here's how to migrate fully and avoid mixed content.
What it means
The site is reachable over HTTP, or pages mix HTTP resources (images, scripts) into HTTPS pages.
Why it matters
HTTPS is a confirmed ranking signal. Browsers also flag HTTP pages as "Not Secure" — instant trust killer.
How to fix it
- Get a free SSL cert (Let's Encrypt or your hosting's built-in).
- Force-redirect HTTP to HTTPS at the server level.
- Update all internal links and asset URLs to https://.
- Update canonicals, sitemap, and Search Console property to https://.
Find this issue on your site automatically
FreeSEO scans for site serves http instead of https and 140+ other issues, free, no signup.
Frequently asked questions
Will migrating to HTTPS hurt rankings short-term?
Brief 1–2 week dip is normal as Google reindexes. Long-term, HTTPS is required.
