feature_image_how-to-fix-the-websie-not-secure
Home » Blog » WordPress » How to Clear HSTS in Chrome if Your Website Still Shows “Not Secure”

How to Clear HSTS in Chrome if Your Website Still Shows “Not Secure”

Updated:   WordPress 1 min read

Your support helps keep this blog running! Secure payments via Paypal and Stripe.


Sometimes after fixing an SSL certificate, Chrome may still force your site to load as “Not Secure.” This happens because Chrome remembers old security settings using something called HSTS (HTTP Strict Transport Security).

If this happens to your site, you can clear the HSTS setting in Chrome by following these steps:

Step 1: Open Chrome HSTS settings

Type this address in your Chrome browser:

chrome://net-internals/#hsts

and press Enter.

Step 2: Delete the domain policy

Scroll down to the section called Delete domain security policies.
In the box, type your website domain name (for example: example.com) and then click Delete.

Step 3: Restart Chrome

Close your Chrome browser completely and then open it again.
Now, try visiting your website with https://.

Your site should now load with the correct secure connection.

Wrap up

This is a very common issue when websites move from “Not Secure” to SSL/HTTPS. Clearing HSTS is like asking Chrome to forget the old settings and check again.


Your support helps keep this blog running! Secure payments via Paypal and Stripe.


Share this:
Senior WordPress Developer (Freelancer)

Senior WordPress Developer (Freelancer)

I’m a professional WordPress and WooCommerce developer based in Chiang Mai, Thailand, with over a decade of experience creating fast, secure, and scalable websites. From custom themes and plugins to full WooCommerce stores, I help businesses build a strong and reliable online presence. Need a freelance WordPress developer you can count on? View my portfolio or get in touch to discuss your project.