“Your Connection Is Not Private” in Chrome? Here Is How to Fix It
“Your connection is not private” means Chrome could not verify the website’s SSL certificate. The certificate may be expired, issued for a different domain, or blocked by your antivirus, a VPN, or a public WiFi login page. In most cases you can fix it in minutes. Check your system clock, clear Chrome’s cache, or finish the WiFi login. The steps below are ordered from quickest to deepest, so work through them in order.
Read the Error Code on Your Screen First
The error page shows a code that starts with NET::ERR_. That code tells you the cause. Match yours in this table before you try any fix.
| Error code | What it means | Most likely cause |
|---|---|---|
NET::ERR_CERT_AUTHORITY_INVALID |
Chrome does not trust whoever issued the certificate | Antivirus HTTPS scanning, a work or school network, or a fake site |
NET::ERR_CERT_DATE_INVALID |
The certificate looks expired or not yet valid | Wrong date or time on your device |
NET::ERR_CERT_COMMON_NAME_INVALID |
The certificate name does not match the site address | A typo in the address, or the site’s setup is broken |
NET::ERR_CERT_REVOKED |
The certificate was cancelled by its issuer | Do not proceed. The site may be compromised |
Most guides skip this step and hand you a generic list. Starting from the code saves you trying fixes that cannot help.
The 60-Second Test: Is It Chrome or Your Connection?
Run these three checks. They tell you where the fault sits.
- Hard refresh the page. Press
Ctrl + Shift + Ron Windows orCmd + Shift + Ron Mac. - Try an Incognito window. Press
Ctrl + Shift + Nand load the same site. If the site loads there, an extension or cached certificate is the cause. - Try your phone on mobile data. Turn WiFi off and load the site. If it works on mobile data, your WiFi network is interfering.
Fix 1: Check Your Date and Time
Certificates have validity windows. If your system clock is wrong by even a few minutes, a valid certificate looks expired. This is the most underrated cause of the error.
On Windows 11: right-click the clock in the taskbar, choose Adjust date and time, turn on “Set time automatically”, then click “Sync now”.
On Mac: open System Settings, go to General, then Date and Time, and turn on automatic date and time.
Fully quit Chrome afterwards and reopen it.
Fix 2: Clear Chrome’s Cache and Cookies
A cached bad certificate keeps blocking you even after the real problem is fixed.
- Click the three-dot menu and open Settings.
- Go to Privacy and security, then Delete browsing data.
- Tick “Cached images and files” and “Cookies and other site data”.
- Set the time range to All time and click Delete data.
- Close Chrome completely and reopen it.
Fix 3: Clear the SSL State on Windows
Chrome relies on Windows’ own certificate cache, not just its browsing data. Almost no guide mentions this step.
- Close Chrome completely.
- Open Control Panel and go to Network and Internet.
- Click Internet Options, then the Content tab.
- Click “Clear SSL state”, then OK.
- Restart Chrome and try the site again.
Fix 4: Turn Off Antivirus HTTPS Scanning
Avast, AVG, Norton, Bitdefender and several ISP security suites, including BT and Sky’s built-in protection, intercept secure traffic to scan it. They swap in their own certificate, which Chrome does not trust.
- Open your antivirus settings.
- Look for “HTTPS scanning”, “SSL scanning”, “web shield” or “encrypted connection scanning”.
- Turn it off temporarily and reload the page.
- If the error clears, add the site as an exception.
Fix 5: Disable Your Extensions
Security and ad-blocking extensions can break secure connections. If the site worked in your Incognito test, an extension is almost certainly the cause. Type chrome://extensions, turn every extension off, reload the page, then re-enable one at a time to find the culprit.
Fix 6: Finish the Public WiFi Login
On trains, in cafes and at airports, the WiFi login page (captive portal) intercepts your connection before you sign in.
- Open
http://neverssl.comin Chrome. It uses plain HTTP on purpose, so the portal cannot block it. - The WiFi login page appears. Sign in as normal.
- Go back to your site. The warning should be gone.
If you use public WiFi often, read our guide on VPN vs proxy: which one do you need.
Fix 7: Update Chrome and Your System
Old Chrome builds carry old root certificates. Click the three-dot menu, go to Help, then About Google Chrome. Chrome checks for updates and installs them. Relaunch when asked.
When the Fault Is the Website’s, Not Yours
Sometimes nothing on your device is wrong. If the warning appears on every device and every network, the site’s own certificate has expired or is misconfigured. Contact the site owner and tell them. Until it is fixed, use the site’s official app or an alternative service instead of clicking through the warning.
Should You Click “Advanced” and Proceed Anyway?
Never proceed on banking sites, email, online shopping, or any page where you log in. Proceeding is acceptable only when you typed the address yourself, will enter no personal or payment data, and the cause is understood. Never download anything the page asks you to install. Fake “security certificate update” pop-ups are a known scam.
If you already clicked through on a page you now distrust and entered details there, change those passwords at once. Then read our guide on how to tell if your email was hacked.
Two Related Chrome Errors, Fixed
Page Won’t Load but the Internet Works
Work through this order: hard refresh with Ctrl + Shift + R, test in Incognito, clear cached images and files, flush your DNS (Windows: Command Prompt, ipconfig /flushdns), disable extensions, then check antivirus. See our guide to WiFi disconnecting on Windows 11 but not other devices.
ERR_CACHE_MISS
This error means Chrome tried to resubmit a form and its cached page copy was missing. Reload the page, or go back and submit the form again.
FAQs
Why does Chrome say my connection is not private on public WiFi?
The WiFi login page intercepts secure connections before you sign in. Open http://neverssl.com to trigger the login page, sign in, then reload your site.
Is “your connection is not private” a virus?
No. It is a warning, not an infection. But take it seriously on login and payment pages, and never download “certificate updates” it prompts you to install.
Why does it happen on one site only?
That site’s certificate is expired or misconfigured. Your device is fine. Contact the site owner.
Can I turn the warning off permanently?
There is a startup flag that suppresses it, but you should not use it. It removes the protection on every site, including your bank.
Does this error happen on phones too?
Yes. Use the same fixes: set date and time to automatic, clear Chrome’s app cache, and complete any WiFi login page before browsing.
Conclusion
Start with the error code on your screen. It points at the cause in seconds. For most people the fix is a wrong system clock, a stale cache, antivirus HTTPS scanning, or an unfinished public WiFi login. Work through the steps above in order and the warning clears. If it appears on every device, the site’s certificate is the problem, and only the site owner can fix it.
