How to Fix “Not Secure” on Blogger URL: A Complete Guide


If you're seeing a “Not Secure” warning in your browser’s address bar when visiting your Blogger site, you’re not alone. This warning appears when your website doesn’t use HTTPS (Hypertext Transfer Protocol Secure), which is essential for data encryption, user trust, and SEO ranking.

In this comprehensive guide, we’ll explore what causes the “Not Secure” message on Blogger URLs, how to fix it effectively, and how to maintain a secure blog going forward.

Table of Contents

  1. What Does “Not Secure” Mean?

  2. Why HTTPS Matters

  3. Common Reasons for “Not Secure” on Blogger

  4. Step-by-Step Guide to Fixing “Not Secure” on Blogger

  5. How to Check if Your Blog Is Secure

  6. Fixing Mixed Content Issues

  7. Securing a Custom Domain on Blogger

  8. SEO and Trust Benefits of HTTPS

  9. Troubleshooting: Still Seeing “Not Secure”?

  10. Final Thoughts

1. What Does “Not Secure” Mean?

When you visit a website and the browser shows a “Not Secure” label next to the URL, it means the site is served over HTTP instead of HTTPS. The "S" in HTTPS stands for Secure, meaning the data exchanged between your site and the user is encrypted.

If your Blogger site lacks this protection, any information entered by visitors—like email addresses or comments—can be intercepted.

2. Why HTTPS Matters

In today’s digital environment, security is no longer optional. Here’s why enabling HTTPS is essential:

  • Privacy Protection: Encrypts data so third parties can't snoop on it.

  • SEO Ranking Boost: Google prioritizes secure sites in its search results.

  • Browser Trust: Browsers like Chrome and Firefox warn users about non-HTTPS sites.

  • Improved User Confidence: Visitors are more likely to stay on and engage with secure websites.

3. Common Reasons for “Not Secure” on Blogger

There are several reasons you might see the “Not Secure” warning on your Blogger URL:

  • HTTPS is not enabled in your Blogger settings.

  • You're using a custom domain and haven't set up HTTPS properly.

  • Mixed content errors: Your site is loading insecure resources (like images or scripts over HTTP).

  • DNS or redirect settings are misconfigured.

4. Step-by-Step Guide to Fixing “Not Secure” on Blogger

Follow these steps to secure your Blogger blog:

Step 1: Log into Blogger

  1. Go to https://www.blogger.com

  2. Log into your Google account.

  3. Choose the blog you want to secure from your dashboard.

Step 2: Enable HTTPS

  1. From the left-hand menu, click on Settings.

  2. Scroll down to the “HTTPS” section.

  3. You’ll see two options:

    • HTTPS Availability: Set this to “Yes”.

    • HTTPS Redirect: Also set this to “Yes”.

Once both are enabled, your blog will automatically redirect visitors from the insecure http:// version to the secure https:// version.

Note: Sometimes, it may take a few minutes (up to 24 hours) for the changes to take effect, especially with custom domains.

5. How to Check if Your Blog Is Secure

Once you’ve enabled HTTPS, test your blog:

  • Visit your blog in a new browser tab.

  • Make sure the URL begins with https://

  • Look for the padlock icon in the browser’s address bar.

If the padlock appears, your site is secure. If it still shows “Not Secure,” move to the next step.

6. Fixing Mixed Content Issues

Even if your site is on HTTPS, you may still get the warning if it includes mixed content—secure (HTTPS) and insecure (HTTP) resources.

What is Mixed Content?

Mixed content occurs when a secure page loads images, videos, stylesheets, or scripts from insecure sources. Browsers block or warn about these elements.

How to Fix It

  1. Check your blog content for links starting with http://.

  2. Update these to use HTTPS, if available.

    For example:

    bash
    http://example.com/image.jpg → https://example.com/image.jpg
  3. Use the “Search and Replace” function in your blog’s HTML editor to update all links at once:

    • Go to Theme > Edit HTML

    • Carefully search for "http://" and replace with "https://" where possible

    • Do not change external links that don’t support HTTPS

  4. You can also use tools like:

These tools scan your blog for insecure elements and help identify what needs fixing.

7. Securing a Custom Domain on Blogger

Using a custom domain like www.yourblog.com? You’ll need a few extra steps.

Step 1: Ensure Your Domain Supports HTTPS

Blogger provides free SSL certificates, but only for domains managed by:

  • Google Domains

  • Domains correctly pointed via CNAME/A Records to Google servers

Step 2: Update Custom Domain Settings

  1. In your domain registrar (GoDaddy, Namecheap, etc.), ensure your DNS records point to:

    makefile
    Name: www Type: CNAME Destination: ghs.google.com
  2. Add the necessary A records (optional but helps redirect root domain):

    216.239.32.21 216.239.34.21 216.239.36.21 216.239.38.21
  3. Back in Blogger > Settings:

    • Under Publishing, click on your custom domain.

    • Toggle HTTPS availability to “Yes”

    • Enable HTTPS Redirect to “Yes” as well.

  4. Wait a few hours for the DNS propagation.

8. SEO and Trust Benefits of HTTPS

Securing your Blogger site improves:

  • Search Engine Visibility: Google prefers HTTPS in rankings.

  • Faster Loading: Many CDNs and browsers optimize HTTPS content.

  • Mobile Performance: Modern mobile browsers may block HTTP sites.

  • Visitor Trust: Users feel safer on a secure connection, especially when submitting forms or comments.

9. Troubleshooting: Still Seeing “Not Secure”?

Here are common problems and fixes:

IssueSolution
HTTPS option not visibleEnsure you are using a supported domain. If not, consider moving your DNS to Google Domains or a compliant DNS provider.
Changes not taking effectWait up to 24 hours for full HTTPS setup to propagate. Clear browser cache.
Mixed content errors persistUse online scanners to locate non-secure resources and update them manually.
Redirect not workingConfirm “HTTPS Redirect” is set to “Yes” in Blogger settings.
Using third-party widgetsSome widgets (like counters or comment plugins) load over HTTP. Remove or replace them.

10. Final Thoughts

Seeing a “Not Secure” warning on your Blogger site can be alarming—but fixing it is usually straightforward. Whether you use a default .blogspot.com domain or a custom one, Blogger provides built-in HTTPS support for free. The key steps include:

  • Enabling HTTPS in Blogger settings

  • Correcting DNS configurations for custom domains

  • Fixing any mixed content issues

  • Monitoring with tools like WhyNoPadlock or SSL Labs

By securing your blog, you not only protect your visitors but also improve your search rankings and credibility. In today’s digital age, HTTPS is the new standard, and making your Blogger site secure is one of the easiest (and most important) upgrades you can make.

Further Reading