HTTPS-Only Mode

HTTPS-Only Mode tries to use an encrypted HTTPS connection. If a site only offers HTTP, the browser can warn or ask before continuing. HTTPS protects traffic in transit between the browser and site; it does not prove a site is honest.

Open Settings → Privacy and security → HTTPS-Only Mode. Choose the available scope, such as all tabs or private tabs, in your installed build.

Check the exact address and whether the site has a working HTTPS version. Allow a one-site HTTP exception only when you understand the risk. Avoid entering passwords or payment details on an HTTP page.

If a page cannot load securely, the site may only support HTTP or may have a broken HTTPS setup. Do not continue merely because an old bookmark used HTTP. Check the domain carefully.

On plain HTTP, another party on the network may be able to read or alter traffic. Never type passwords, payment details or sensitive messages into a page reached through an HTTP exception.