Google Chrome to expand security warnings for unencrypted websites

HTTPS connections currently account for 95 to 99 percent of web traffic, a saturation point that Google cites as the primary justification for tighter enforcement. The company acknowledges that while private websites remain the largest hurdle for universal encryption—often due to the technical complexity of obtaining certificates—these sites pose fewer risks than public portals where attackers can more easily intercept user data.

Google intends to phase in these protections gradually. Users enrolled in the Enhanced Safe Browsing program will see the new warnings as early as April 2026. For those who find the alerts intrusive, the browser will retain a manual override; users can disable the notifications by toggling the “Always Use Secure Connections” setting in their preferences.