Fix security warnings or SSL certificate errors.

If your browser shows security warnings when you visit your site, or if you're logged in and an SSL certificate message appears, follow the steps in this guide.

For general information about SSL, visit Understanding SSL certificates.

Tip: If your domain is new to Squarespace, your SSL certificate might need a day or two to process.

Privacy or security warnings when visiting your site

If you or your visitors find a privacy or security warning when visiting your site, the browser is detecting insecure content on the page. Depending on the browser, the message might be:

• “Your connection is not private"
• "Your connection is not secure"

There are a few reasons this might happen. In many cases, it's temporary, and you can fix it by following these steps:

Fix the issue

To remove the warning from your site:

1. If your domain is new to your site, wait 72 hours. New and recently connected domains may take up to 72 hours to finish connecting and generate the certificate.
2. After 72 hours, ensure your site is set to Secure in the SSL panel.
3. Review your site for mixed content.
4. Confirm your domain is correctly connected to your site.
   • For Squarespace domains, ensure your domain's default records are intact.
   • For third-party domains connected to Squarespace, check that the DNS records in your provider's account are entered correctly.
5. After making any changes, wait 72 hours for the certificate to process. To check if the SSL certificate is working, visit your domain in a private browsing window.

More troubleshooting

If you're still having trouble, you might be using an unsupported browser. The web and mobile browsers listed on Let's Encrypt under Platforms that trust ISRG Root X1 meet our security standards for SSL. If your browser isn't on the list, it's not supported.

Error message: SSL Certificates Unavailable

If we have trouble generating a certificate for your domain, an "SSL Certificates Unavailable" message will appear in your domain overview panel.

To fix the issue, wait a full 72 hours. New and recently connected domains may take up to 72 hours to finish connecting and generating the certificate.

If the error message still appears after 72 hours, the domain may not be properly pointing to your site. You can troubleshoot based on your domain provider:

Squarespace domains

For Squarespace domains, ensure that your default records are intact.

Third-party domains connected to Squarespace

For third-party domains connected to Squarespace:

1. Review your domain-mapping records to ensure your domain is correctly connected.
2. Ask your provider if their system uses CAA record restrictions. Our SSL provider can't issue a certificate if there's a restriction. For more help and steps to resolve, review our sample message or visit Let’s Encrypt’s documentation.
3. If the problem persists, we might not be able to issue a certificate because of a problem with your domain provider. For the most secure experience for you and your visitors, we recommend transferring your domain to Squarespace. If your domain isn't eligible for a transfer, keep it registered with your provider and disable SSL.

You can also contact us for help with your SSL certificate.

Next steps

After the security warnings have cleared, you may want to:

• Ensure the secure version of your site appears in search results by requesting Google Search Console index your site with the SSL certificate working.
• Clear your browser's cache, if the browser warning continues to appear outside a private browsing window.