High impactSecurity

Site Serves HTTP Instead of HTTPS

HTTPS has been a Google ranking signal since 2014. Here's how to migrate fully and avoid mixed content.

What it means

The site is reachable over HTTP, or pages mix HTTP resources (images, scripts) into HTTPS pages.

Why it matters

HTTPS is a confirmed ranking signal. Browsers also flag HTTP pages as "Not Secure" — instant trust killer.

How to fix it

  1. Get a free SSL cert (Let's Encrypt or your hosting's built-in).
  2. Force-redirect HTTP to HTTPS at the server level.
  3. Update all internal links and asset URLs to https://.
  4. Update canonicals, sitemap, and Search Console property to https://.

Find this issue on your site automatically

FreeSEO scans for site serves http instead of https and 140+ other issues, free, no signup.

Frequently asked questions

Will migrating to HTTPS hurt rankings short-term?

Brief 1–2 week dip is normal as Google reindexes. Long-term, HTTPS is required.