Unencrypted pages may disappear from mobile search results? Google warns!

For several years now, Google has been encouraging website owners to implement the secure HTTPS protocol. Now, the Mountain View giant is taking it a step further — announcing that websites that still use the unsecured HTTP protocol may completely disappear from mobile search results. This is a groundbreaking change that could affect thousands of websites and significantly impact their visibility online. Is this the end of the era of unsecured websites? All signs point to yes.

What does the lack of HTTPS mean?

HTTPS (HyperText Transfer Protocol Secure) is an extension of the standard HTTP protocol that provides encryption for data transmitted between the user’s browser and the server. It protects information—such as login credentials, credit card numbers, or contact forms—from being intercepted by third parties.

The lack of HTTPS means that data sent by the user is not protected in any way. This opens the door to “man-in-the-middle” attacks, where a cybercriminal can intercept or even modify the transmitted information. From the user’s perspective, this poses a serious threat to privacy and security.

Moreover, modern browsers—such as Chrome and Firefox—already mark websites without HTTPS as “Not Secure,” which may discourage visitors from continuing to use the site. The absence of an SSL certificate affects not only image and trust but also SEO—since 2014, Google has considered HTTPS a ranking factor.

Lack of encryption can have even more serious consequences: complete invisibility in mobile search results. This is a clear sign that HTTPS is no longer optional but an absolute standard.

Impact on mobile search results

Why is Google focusing on mobile results?

For several years, Google has been consistently promoting the “mobile-first” strategy. Back in 2018, the company announced a full transition to mobile-first indexing, meaning that the mobile version of a site became the primary version considered for search rankings. This is statistically justified—currently, over 60% of internet traffic comes from mobile devices. Google wants to ensure users have fast, secure, and convenient access to content—regardless of the device they use.

User Experience as a trigger point

For Google, high-quality user experience (UX) is a key priority. Sites that lack HTTPS automatically lower visitors’ trust. Browsers warn users about the lack of security, which may lead to them leaving the site. In the mobile context, this is even more significant—smartphone users expect fast, secure, and smooth access to information without annoying alerts or the risk of data loss.

Security is now an integral part of UX, and Google increasingly combines these two aspects—both through ranking signals and planned algorithm updates.

Potential consequences for sites without HTTPS

If website owners ignore the need to implement HTTPS, they may face serious consequences:

• Complete removal from mobile search results – meaning the loss of a significant portion of organic traffic.
• Loss of user trust – warnings about lack of security effectively deter visitors.
• Lower conversion rates – users are reluctant to enter personal data on unencrypted sites.
• Legal risks – in case of a data breach, companies may be held liable, especially under regulations like GDPR.

Who is affected by the change?

The update planned by Google regarding the exclusion of websites without HTTPS from mobile search results is not aimed solely at large internet services. On the contrary—it affects all websites, regardless of size, topic, or location. Anyone who runs a publicly accessible website should take this warning seriously.

1. Small businesses and local companies
   Owners of local businesses often overlook technical matters, assuming that since their site is just a “business card,” it doesn’t need an SSL certificate. Unfortunately, under the new search model, their websites may become invisible to mobile users searching for services nearby.
2. Blogs, thematic portals, and hobby sites
   Many bloggers and content creators still use free hosting solutions, which do not always provide HTTPS by default. Even if the site doesn’t process personal data, the lack of encryption can result in blocked access from mobile search—which directly impacts traffic and potential ad revenue.
3. Online stores (e-commerce)
   For e-commerce, the lack of HTTPS is a critical mistake. These types of sites process sensitive data—from addresses to payment information. Google has long promoted secure online shopping, and being excluded from search results will be equivalent to losing customers and credibility.
4. Sensitive sectors: health, finance, education
   Sites in the medical, financial, or educational sectors bear special responsibility for data protection. Google is likely to treat the lack of HTTPS in these areas as a serious threat to users, which may result in quicker and stricter visibility restrictions.

How to prepare your site for the changes

Implementing HTTPS today is not just a matter of security but an absolute necessity if we want to maintain visibility in Google’s mobile search results. Fortunately, the process isn’t complicated—it just requires deliberate action and a few key steps.

Choose the right SSL certificate

To implement HTTPS, you need to have an SSL certificate. There are several types of certificates to choose from:

• DV (Domain Validation) – the simplest and cheapest option, sufficient for most business websites and blogs.
• OV (Organization Validation) – also verifies company data, recommended for organizations.
• EV (Extended Validation) – the most advanced certificate, mainly used by banks and large online stores (with a green address bar in the browser).

Many hosting companies offer free Let’s Encrypt certificates, which are sufficient for most websites.

Want to learn more about the SSL certificate? Check out our article!

What is an SSL certificate and why can’t you do without it?

SSL is a network protocol that has become the widely accepted standard for data encryption on the Internet. Your website simply cannot do without it!

read more

Configure redirects

After installing the certificate, you need to configure a 301 redirect from the old HTTP address to the new HTTPS version. This will:

1. preserve SEO rankings,
2. prevent duplicate content issues,
3. ensure users always land on the secure version of your site.

Update internal links and resources

Make sure that all internal links, images, scripts, and styles (CSS, JS) also use the HTTPS version. Otherwise, you may encounter “mixed content” warnings, which still harm user trust and search rankings.

Submit your site to Google Search Console

After implementing HTTPS, it’s worth adding the new version of your site to Google Search Console and submitting the updated sitemap. This will help speed up indexing of the HTTPS version and detect any potential errors.

Test the implementation

Finally, you should run tests:

• Check your certificate using tools like SSL Labs.
• Monitor for redirect errors, mixed content warnings, and drops in traffic.
• If necessary, consult an SEO specialist or system administrator.

Summary

Another major change in Google’s web security policy is fast approaching. Excluding non-HTTPS websites from mobile search results is not just a technical update—it’s a clear message: the internet must be safe for every user, regardless of the device they use.

For website owners, this means the need to act here and now. An SSL certificate is no longer a choice but a standard. Not implementing HTTPS means the risk of decreased visibility, user loss, and in many cases, loss of reputation and revenue.

If your website is still running on HTTP—it’s time to change that. Give your users what they expect: a safe, fast, and trustworthy internet.