You click a link and instead of the page you expected, you see a red screen saying "Your connection is not private" (Chrome/Edge) or "Warning: Potential Security Risk Ahead" (Firefox). It's alarming, but it doesn't automatically mean the site is malicious.

What causes this error?

Every secure website (HTTPS) uses a certificate to prove its identity. This error appears when your browser can't verify that certificate. Common reasons include:

  • Your computer's date and time is wrong
  • The website's certificate has genuinely expired
  • You're on a public Wi-Fi network intercepting your traffic
  • Antivirus software is scanning HTTPS traffic and using its own certificate

Fix 1: Check your date and time

This is the most common culprit. If your system clock is off by even a day, certificates appear invalid.

  1. On Windows: right-click the clock in the taskbar and choose Adjust date/time. Turn on Set time automatically.
  2. On Mac: go to System Settings > General > Date & Time and enable Set time and date automatically.

Fix 2: Try a different network

If you're on public Wi-Fi at a café or hotel, switch to your phone's mobile data or a trusted home connection. Many public hotspots use HTTPS inspection, which triggers this warning.

Fix 3: Clear your browser's cache

A cached bad certificate can keep triggering the error even after a site is fixed. Press Ctrl + Shift + Delete (Windows) or Command + Shift + Delete (Mac), select Cached images and files, and clear.

Fix 4: Temporarily disable HTTPS scanning in antivirus

Security suites like Avast, Kaspersky, and ESET sometimes intercept HTTPS traffic with their own certificate. Look in your antivirus settings for "HTTPS scanning" or "Web Shield" and temporarily disable it to test.

When to actually stay away

If the error code says NET::ERR_CERT_AUTHORITY_INVALID or the domain name in the certificate doesn't match the site you're visiting, don't proceed — especially on a banking or shopping site. The warning is doing its job.

Still seeing the error? Ask us and include the full error code shown on the page.