Fix today

Your login page is not secure

This is the exact wording EverThread uses when it finds this on a customer's site, written for someone who runs a business, not a server. The example site here is yourbakery.com.

What we saw

A page on yourbakery.com asks for a password without the padlock.

Why it matters

Passwords typed there can be read by anyone between the visitor and your server.

How to fix it

Ask your developer to serve the login page over https and redirect http to it.

For your developer

Password input rendered on an http:// page (https://yourbakery.com/). Serve over HTTPS and enforce redirect.

Does your site have this?

Check it free, right now. We look at your home page the way a browser does and tell you in plain English. No account.

Or sign up free and we check it every day and email you when something changes.