Security problems
SSL warnings, malware, hacked sites, and redirects. Start with the free guide that matches your situation.
Cloudflare Error 525 SSL Handshake Failed and 526 Invalid Certificate
Your site shows a Cloudflare page reading "Error 525: SSL handshake failed" or "Error 526: Invalid SSL certificate" — Cloudflare is working, but it cannot make a trusted secure connection to your hosting server.
Read the guideERR_SSL_PROTOCOL_ERROR: This Site Can't Provide a Secure Connection
Chrome or Edge shows "This site can't provide a secure connection" with the code ERR_SSL_PROTOCOL_ERROR — the browser tried to open a secure connection to your site and the server's answer made no sense to it.
Read the guideGoogle Flagged Your Site as Deceptive or Unsafe caution
Visitors see a full-page red "Deceptive site ahead" or "Dangerous" warning before your website loads — which blocks nearly everyone until the flag is cleared.
Read the guideHow to Get a Free SSL Certificate for Your Website
You almost certainly do not need to buy an SSL certificate. Most hosts and website builders include a free one — the job is switching it on, making sure it renews, and sending every visitor to the https version.
Read the guideMixed Content Warning
Your site has SSL, but some pages still show "Not Secure" or a broken padlock because they load insecure images, scripts, or embeds over plain http.
Read the guideSpam Pages Showing in Google Results for Your Site caution
Google shows pages under your domain that you never made — Japanese text, cheap pharmacy pills, casino or replica-product listings — and they are hurting how your business looks in search.
Read the guideSSL Certificate Expired caution
Your site's SSL certificate ran out, so every visitor now gets a full-page browser warning instead of your website — usually because an automatic renewal quietly failed.
Read the guideSSL Certificate Name Mismatch (ERR_CERT_COMMON_NAME_INVALID)
Browsers warn that your site's security certificate belongs to a different name — the certificate itself may be valid, but it was not issued for the exact address the visitor typed.
Read the guideSSL Certificate Not Trusted (NET::ERR_CERT_AUTHORITY_INVALID) caution
Browsers warn that your site's security certificate is not trusted — usually NET::ERR_CERT_AUTHORITY_INVALID in Chrome — because the certificate was not issued by an authority the browser recognizes, or the chain behind it is incomplete.
Read the guideSSL Warning / "Not Secure" Website
Browsers show a "Not Secure" label or a full-page certificate warning when people visit your site — and most visitors will turn back rather than click through.
Read the guideUnknown Admin User in WordPress: What to Do (In the Right Order) caution
You found an unknown admin user in WordPress — an administrator account you did not create — and need to know whether it is a hacker, a forgotten developer, or a plugin, and what to do without making things worse.
Read the guideWebsite Blocked by Antivirus or Company Firewall
Customers say Norton, McAfee, or their office network is blocking your website — sometimes it is a false alarm, and sometimes the security software has spotted something real.
Read the guideWebsite May Be Hacked caution
Strange pages, redirects, warnings, or behavior suggest someone may have tampered with your site. The goal now is to confirm carefully and act deliberately — not fast and destructively.
Read the guideWebsite Redirects to Strange Pages caution
Visitors who open your site get sent to spam, ads, gambling, adult, or other unrelated pages. This is one of the clearest external signs of injected malware.
Read the guideWordPress Spam User Registrations: Stopping Fake Users Signing Up
Your WordPress site is getting spam user registrations — fake users signing up with gibberish names and odd email addresses, sometimes dozens a day — and you want them stopped without locking out real customers.
Read the guideWordPress Under Brute-Force Login Attacks
Bots are hammering your WordPress login page with password guesses — normal internet weather for every WordPress site, but worth hardening against so it stays merely weather.
Read the guideYour Connection Is Not Private Warning caution
Visitors get a full-page browser warning — "Your connection is not private" — instead of your website, and nearly all of them will turn back rather than click through.
Read the guideNot sure which guide fits?
The Website Help Finder asks a few short questions and points you to the safest next step.
Use the Website Help Finder