How to Remove "Not secure" from Website in Microsoft Edge

You can remove the "Not secure" warning for specific websites in Microsoft Edge by configuring a policy using the Local Group Policy Editor. This method allows you to control where certain security restrictions, which trigger the "Not secure" label, apply.

The "Not secure" indicator appears in your address bar when you visit a website using the older, unencrypted HTTP protocol instead of the more secure HTTPS. While HTTPS encrypts data transferred between your browser and the website, HTTP does not, making the connection vulnerable to eavesdropping. The "Not secure" label serves as a warning about this lack of encryption.

If you understand the risks and wish to suppress this warning for trusted HTTP sites, you can utilize a specific administrative template policy in Microsoft Edge.

Using Local Group Policy Editor to Suppress the "Not secure" Warning

This method involves enabling a policy that allows you to specify which origins (websites) should be exempt from security restrictions on insecure connections.

Follow these steps:

1. Open Local Group Policy Editor: Search for gpedit.msc in the Windows search bar and press Enter. You may need administrator privileges.
2. Navigate to Microsoft Edge Policies: In the left-hand pane of the Local Group Policy Editor, browse to the following location:
   Computer Configuration > Administrative Templates > Microsoft Edge
3. Locate the Relevant Policy: In the right-hand pane, find and double-click the policy named "Control where security restrictions on insecure origins apply".
4. Enable the Policy: In the policy window that opens, select the Enabled option at the top.
5. Specify URLs: Under the "Options" section, click the Show... button.
   • A new window will appear with two columns, "Value" and "Name".
   • In the "Value" column, type the URLs of the websites where you want to remove the "Not secure" warning. Enter one URL per row. For example:
     • http://example.com
     • http://anotherwebsite.org
       (Note: You typically don't need to specify https:// URLs here, as they are already considered secure and don't show the warning.)
   • Click OK to close the value list window.
6. Apply and Close: Click Apply and then OK in the policy window to save your changes.

Reference information from Microsoft Learn (as of 10-Nov-2021) confirms these steps using the "Control where security restrictions on insecure origins apply" policy located under Computer Configuration/Administrative Templates/Microsoft Edge.

Once the policy is applied (you might need to restart Edge or your computer), Microsoft Edge will no longer display the "Not secure" warning for the websites you listed under the policy options, as it will suppress the relevant security restrictions for those origins.

Important Consideration: Suppressing the "Not secure" warning does not make the website secure. The connection remains unencrypted. Only use this method for websites you trust and understand the inherent risks of sending data over an insecure connection.