Practical Security Guides For Your Team

Your website's security certificate has expired. This certificate is what tells browsers your site is safe and keeps data encrypted between your site and your visitors. Right now, anyone visiting your site is likely seeing a full-screen warning saying 'Your connection is not private' — and most people will leave immediately rather than click through.

Your website can be visited over plain HTTP (unencrypted), and it doesn't automatically send visitors to the secure HTTPS version. Any user who lands on an HTTP link — from an old email, a bookmark, or a mistyped URL — will have their connection left unprotected. Think of it like a shop that has a secure back entrance but leaves the front door unlocked with no sign pointing visitors to the right way in.

Your website already uses a secure connection (HTTPS), which is great. But there's a setting that tells browsers how long to remember to always use that secure connection — and yours is set too low. Think of it like a reminder that expires too quickly: if a user's browser forgets before their next visit, there's a brief window where they could be exposed to a connection that isn't fully protected.