HTTPS-Only Mode in Firefox

This security-enhancing mode forces all connections to websites to use a secure encrypted connection called HTTPS. Most websites already support HTTPS; some support both HTTP and HTTPS. Enabling this mode guarantees that all of your connections to websites are upgraded to use HTTPS and hence secure. Learn more about the benefits and how to enable HTTPS-Only Mode.

Table of Contents

  • 1 What is the difference between HTTP and HTTPS?
  • 2 Enable HTTPS-Only Mode
    • 2.1 Enable/Disable HTTPS-Only Mode
  • 3 Secure Connection Not Available
  • 4 Turn off HTTPS-Only Mode for certain sites
  • 5 Add exceptions for HTTP websites when you're in HTTPS-Only Mode

What is the difference between HTTP and HTTPS?

HTTP stands for Hypertext Transfer Protocol and is the foundational protocol for the web and encodes basic interactions between browsers and web servers. The problem with the regular HTTP protocol is that the data transferring from server to browser is not encrypted, meaning data can be viewed, stolen, or altered. HTTPS protocols fix this by using an SSL (secure sockets layer) certificate, this creates a secure encrypted connection between the server and the browser which protects sensitive information.

Enable HTTPS-Only Mode

When you use HTTPS-Only Mode, this ensures all of your connections are encrypted and secure. So you have peace of mind that no one can snoop on the content of the pages you visit or hack into your connection to a website to steal your passwords, credit card information, or other personal information. This is especially useful when you are using a public Wi-Fi, where you can't be sure of the integrity of your internet connection.

For example, when HTTPS-Only Mode is active and a site is visited such as http://example.com, Firefox will silently upgrade to https://example.com:

ConnectionUpgradeExample

Enable/Disable HTTPS-Only Mode

  1. In the Menu bar at the top of the screen, click and select . Click the menu button Fx89menuButton and select .
  2. Select from the left menu.
  3. Scroll down to HTTPS-Only Mode.
  4. Use the radio button to select whether to enable or disable HTTPS-Only Mode, or select to only enable it for private windows.
    Fx90HTTPS-OnlyModeSettings

Secure Connection Not Available

Some websites only support HTTP and the connection cannot be upgraded. If HTTPS-Only Mode is enabled and an HTTPS version of a site is not available, you will see a Secure Connection Not Available page:

SecureConnectionNotAvailable

If you click Continue to HTTP Site you accept the risk and then will visit an HTTP version of the site. HTTPS-Only Mode will be turned off temporarily for that site.

Click the Go Back button if you want to avoid any unencrypted connections.

Turn off HTTPS-Only Mode for certain sites

If HTTPS-Only Mode is enabled, and you frequently visit a website that does not support HTTPS or does not seem to be rendering certain elements of the page correctly, you can turn off HTTPS-Only Mode for a particular site.

  1. Click the Lock icon in the address bar.
  2. Use the dropdown under HTTPS-Only Mode and select .
    Fx83TurnOffHTTPSOnlyPerSite

Add exceptions for HTTP websites when you're in HTTPS-Only Mode

If a website isn't displaying correctly, and it's one you trust and want to visit, you can turn off HTTPS-Only Mode for that site. Exceptions allow you to visit an HTTP version of a website while you're browsing in HTTPS-Only Mode. Exceptions can be applied temporarily for a single browsing session, or permanently. To add an exception for a website:

  1. In the Menu bar at the top of the screen, click and select . Click the menu button Fx89menuButton and select .
  2. Select from the left menu.
  3. Scroll down to HTTPS-Only Mode.
  4. Select Enable HTTPS-Only Mode in all windows.
  5. Click to open the Exceptions dialog.
    Fx90HTTPS-OnlyModeExceptions
  6. Type in the exact address of the HTTP website for which you want to turn off HTTPS-Only Mode.
  7. Select to permanently turn off HTTPS-Only Mode for that website, or select to turn it off for your current browsing session.
  8. Click Save Changes.

These fine people helped write this article:

Illustration of hands

Volunteer

Grow and share your expertise with others. Answer questions and improve our knowledge base.

Learn More