If Chrome shows "Not Secure" next to your website address, visitors may leave before your page even loads – and Google ranks secure sites higher. The good news: it is usually quick to fix. Here is how.

Why does my site say "Not Secure"?

• No SSL certificate – the site loads over HTTP instead of HTTPS.
• The SSL certificate expired or was issued for a different domain name.
• Mixed content – the page loads over HTTPS but some images or scripts still load over HTTP.
• No redirect – the certificate exists, but visitors still reach the HTTP version.

Step 1: Install an SSL certificate

Every Oneway hosting plan includes a free SSL certificate, issued automatically once your domain points to our servers. In cPanel you can check its status under SSL/TLS Status and run AutoSSL if needed. If you need an organisation-validated or wildcard certificate, see free vs paid SSL.

Step 2: Force HTTPS

Redirect all HTTP traffic to HTTPS. In cPanel, use Domains → Force HTTPS Redirect. On WordPress, also set both the WordPress Address and Site Address to https:// under Settings → General.

Step 3: Fix mixed content

If the padlock is still missing, open your browser's developer tools (F12) and check the Console for "Mixed Content" warnings. Update those image, script and stylesheet links from http:// to https://. On WordPress, a search-and-replace plugin can update old links in the database.

Step 4: Check the certificate covers www

Make sure the certificate covers both yourdomain.co.tz and www.yourdomain.co.tz, and that your DNS for both points to the same server.

Step 5: Re-test

Clear your browser cache and reload. The padlock should appear. You can also test your site with an online SSL checker.

Why it matters for business

HTTPS protects customer data on contact forms, logins and checkouts, builds trust, and is a Google ranking signal. Read more in why every business website needs HTTPS.

Still seeing the warning? Open a ticket with your website address and our team will fix it. Hosting elsewhere? Our hosting plans include free SSL.