The lock in the browser bar indicates the website uses HTTPS, which signifies that any information you enter into the website is being submitted to the website in an encrypted manner. This means no one can read the text you type into a field except the website after you submit it. 

This is important because in the past hackers have been able to break into that transmission of data and intercept important items like your username, password, credit card or social security number. This protocol (set of instructions) also verifies that the website you are connecting to is who it says it is.

HTTPS by Default

Google Chrome, Microsoft Edge, Mozilla Firefox now alert you if you land on a page that does not have HTTPS. Significantly, these popular browsers have also recently started rolling out updates to push HTTPS by default. You no longer have to type the https:// before a website to get the secure version.

• Chrome (beginning with version 90 around April 1, 2021) navigates to the HTTPS version of a website by default.
• Mozilla Firefox is pushing HTTPS by default so far only in private browsing windows as of August 10, 2021 with version 91 but did announce that they expect to roll it out to all browsing soon.
• Microsoft Edge deployed their “Automated HTTPS” feature with version 92 announced on June 1, 2021.
• And naturally you all uninstalled Internet Explorer after the last post, so we don’t even have to address that.

Secure Fraudsters?

While most website now use HTTPS, it is important to remember that fraudsters know this as well.  The percentage of phishing emails that push you to an encrypted website has risen year-over-year to 84% in Q4 of 2020.  You used to be able to look for the lock in the browser bar and feel confident that you were navigating to a legitimate site. Now malicious actors commonly use free encryption services to give their fake websites an air of legitimacy.

Be More Secure Tip >

Don’t trust a website simply because it displays the lock.