Solve SSL Issues on Your Squarespace Site
TL;DR:
- Squarespace provides free SSL certificates for domains pointing to its sites
- Allow up to 48 hours for SSL certificates to activate on new or reconnected domains
- Check your domain settings and site content security to avoid 'not secure' warnings
- Unsupported browsers may prevent SSL from functioning correctly
- Contact Squarespace support if issues persist after adjusting settings
When you access a Squarespace site and see warnings like "Your connection is not private" or "Your connection is not secure," it typically means your SSL certificate isn't properly set up yet or there's mixed content (secure and non-secure items) on your site. Here's how to resolve these issues.
Understanding SSL Certificate Warnings
SSL warnings usually appear for two main reasons. Either your SSL certificate isn't properly configured, or your site has mixed content where some elements load over secure connections and others don't. Both issues are fixable with the right approach.
Immediately After Domain Connection
Wait 48 Hours: New or recently connected domains can take up to two days to start working with an SSL certificate. This is normal and not something you can speed up.
Check SSL Settings: Make sure your site's SSL setting is switched to 'Secure' in the SSL panel within your Squarespace dashboard.
Reviewing Your Site's Content and Connection
Scan for Mixed Content: Look for any elements like images or scripts loaded over non-HTTPS connections and update them to HTTPS. This is one of the most common causes of SSL warnings.
Verify Domain Configuration: For Squarespace domains, check that the default records are unaltered. For third-party domains, ensure DNS records in your provider's account correctly point to Squarespace.
Pixelhaze Tip: Visiting your domain in a private browsing window can help you check if the SSL certificate is functional without cache interference.
If SSL Certificates Are Unavailable
Initial 48-Hour Wait: Give it two full days for the domain to connect properly and generate the SSL. This applies even if you're eager to get things working.
Correct Pointing Issues: Ensure your domain accurately points to your Squarespace site using correct DNS settings. Wrong DNS settings are a common culprit.
Check for CAA Restrictions: Confirm with your domain provider if there are any Certification Authority Authorization restrictions that might prevent issuing your SSL certificate.
Continual Browser and Compliance Issues
Browser Compatibility: Use browsers that recognize ISRG Root X1, as listed on Let's Encrypt. Older browsers may not support modern SSL certificates.
Domain Transfer to Squarespace: For simplest SSL management and security, consider transferring your domain to Squarespace if persistent problems occur and the domain is eligible for transfer.
FAQs
What should I do if I get a security warning on my Squarespace site?
Ensure your domain's SSL settings are correct, wait 48 hours for new connections, remove mixed content, and verify browser support.
How do I know if my SSL certificate is active?
Visit your site in a private browser window to bypass cache and see if the SSL warning persists.
What if my SSL issue isn't resolved in 48 hours?
Double-check your domain's DNS settings, consult with your domain provider about possible CAA records, or consider migrating your domain to Squarespace for streamlined support.
Jargon Buster
SSL (Secure Sockets Layer): A security protocol that encrypts communication between web browsers and servers to prevent data theft.
Mixed Content: When a secure website (HTTPS) includes elements from insecure sources (HTTP), posing a security risk.
DNS Records: Settings within your domain provider that direct Internet traffic to your website. Incorrect settings can impact SSL certificate application.
Wrap-up
Most SSL issues on Squarespace resolve themselves with patience and the correct settings. The key is ensuring your domain settings are accurate and giving the system around 48 hours to update. If problems persist, Squarespace's support team can help ensure your site remains secure and trusted by visitors.
Ready to dive deeper into Squarespace? Join Pixelhaze Academy for expert training and support.