Google is enhancing its online safety protocols. Beginning in October 2026, Chrome will automatically activate the “Always Use Secure Connections” feature for all users, displaying clear warnings when accessing websites lacking HTTPS encryption. Currently, Chrome provides a “Your connection is not private” notification if a site’s HTTPS is misconfigured. However, with the forthcoming update, alerts will also be shown for any site that doesn’t utilize HTTPS, further improving user security on the web. HTTPS, which stands for Hypertext Transfer Protocol Secure, guarantees encrypted communication between users and websites, protecting sensitive data from hackers and malicious actors. Although Google started issuing warnings for HTTP pages in 2021, users previously needed to opt in to see them.
This upcoming change will automatically enforce a safer browsing experience. Google reports that approximately 95 to 99 percent of web connections are made via HTTPS. This high adoption rate allows for stronger measures against the remaining insecure HTTP connections, according to their announcement. Nonetheless, Google pointed out that the primary source of insecure HTTP connections comes from private websites, which often encounter challenges in obtaining HTTPS certification. While HTTP access to private sites can still pose risks, they are generally considered less hazardous than public site connections. Prior to the global launch, Chrome users who have Enhanced Safe Browsing enabled will start receiving these security alerts in April 2026.
Google has assured users they can opt out of this feature by turning off the “Always Use Secure Connections” option in Chrome’s settings. This initiative aims to enhance safety and transparency for users globally.
