Which of the Following Indicates a Website Is Not Secure

When you’re on a checkout page or signing in, a quick look at the address bar can tell you a lot. One of the most common “quiz-style” signs is when the site uses HTTP instead of HTTPS. If you notice other issues too (like no lock icon), you should treat the page as not secure and move on.

Look for HTTP vs. HTTPS in the URL

Start with the easiest check: the beginning of the website address.

• HTTP (no “S”) is the big red flag for the question which of the following indicates a website is not secure. In the common explanations, it’s described as an insecure connection, and it can trigger a “Not Secure” warning.
• HTTPS (with an “S”) is what you want for a secure website.

Many browsers show this difference right away, but you can also spot it directly in the URL.

Check for a lock icon (or shield) in the address bar

Next, look at the address bar for the lock icon (sometimes it looks like a lock or a shield).

A common indicator that a connection is not secure is:

• A lock icon is not displayed in the address bar

If you don’t see the lock (or a similar security icon), that’s another sign the page isn’t using the protected connection you want before entering personal or payment information.

See whether the site displays its digital certificate

Many secure sites show a digital certificate. You can think of it as evidence that the site is set up for a protected connection.

In the same set of address-bar signals, a missing or not-shown certificate is often connected to the idea that the site is not encrypted. Without encryption, the risk described in the usual guidance is that information you enter could be intercepted.

You don’t need to understand every technical detail. Just look for a sign that the site is using a digital certificate as part of its secure setup.

Understand what “Connection is not secure” means

Sometimes your browser shows a warning that literally says “Connection is not secure.” A few explanations mention Chrome showing this message when:

• “Always use secure connections” is turned on, and
• the site doesn’t support HTTPS

In that case, the browser can’t establish the secure connection it expects. In simple terms, the page isn’t protecting the connection you’re about to use.

What “secure website” indicators in the address bar look like

So what usually counts as a secure website while you browse?

These are the address-bar signs many people are taught to check:

• The URL starts with HTTPS (not HTTP)
• You see a lock icon or a similar security symbol
• The site shows a digital certificate (often tied to the browser’s security details)
• The page doesn’t show warnings about not secure or an unprotected connection

These are the same signals that come up in “secure vs. not secure” answers because they’re noticeable quickly, without digging through settings.

Quick checklist: signs a website is not secure

Here’s the fast, simple version you can use before you type anything.

If you see any of these, treat the site as not secure:

• HTTP is in the URL (not HTTPS)
• No lock icon (or shield) shows in the address bar
• The page suggests it’s not encrypted, and warns that information you enter could be intercepted
• You get a browser warning like “Connection is not secure”

If a site fails one or more of those, don’t keep going just because the page looks professional. Take a moment to find a secure option.

How to know if a website is HTTPS or HTTP (fast method)

This is the quickest way to check, especially on your phone.

1. Tap the address bar.
2. Look at the start of the URL.
3. Ask one question: Does it say HTTPS or HTTP?

• HTTP = insecure connection (and may come with “Not Secure” warnings)
• HTTPS = secure connection

You don’t need to read the whole page or check every setting.

What to do if a site looks not secure

If you see address-bar warnings or missing security indicators, do the practical next steps:

• Don’t enter checkout or login details.
• Navigate away from the page.
• Find the same store or service through a trusted route, like the main site you already know, or the official way you normally reach the company.
• If you came from a search result, go back and choose a different link that shows HTTPS and a lock icon.

Even when you’re trying to shop quickly, it’s worth pausing. Those warning pages are there for a reason.

---

Before you enter checkout or login details, use the checklist above to confirm HTTPS and the lock/certificate indicators. If you see HTTP, no lock icon, or a “Connection is not secure” message, don’t enter your information—just navigate away.