Google to Make HTTPS the Default Standard for Chrome by 2026

Google is preparing to introduce one of the most substantial security upgrades in the history of Chrome. By October 2026, the browser will automatically enable the Always Use Secure Connections feature for all users, ensuring that every website visit defaults to HTTPS encryption.

This change means that any site not supporting HTTPS will trigger a clear, prominent security warning in Chrome. Presently, such alerts only appear on pages with flawed or expired SSL certificates, but within the new design, users will see them whenever they attempt to open an unencrypted page.

Why Google Is Making the Shift

HTTPS is a secure communication protocol that protects user information from interception and tampering by encrypting the connection between the browser and web server. With between 95% and 99% of all connections already using HTTPS, Google believes the time is right to enforce a stronger global standard and phase out unprotected HTTP links entirely.

Changes will begin rolling out in April 2026, starting with those who have activated the Enhanced Safe Browsing option. Once the system stabilizes, the settings will expand to all Chrome users later that year. Google stresses that most remaining HTTP traffic originates from private network devices and legacy systems, which may need extra configuration support before the full transition.

What Users Can Expect

When this update goes live, users navigating to a site without HTTPS will immediately see a warning stating that the connection is not secure. This alert is intended to discourage people from entering sensitive data such as passwords or payment details on unsafe websites.

Although the upgrade dramatically heightens safety online, Google will still allow users to disable these warnings manually if they prefer. The move forms part of Google’s long-term effort to create a safer web ecosystem and make encryption a universal expectation rather than an optional feature.