HTTPS-Only Mode in Firefox for Android

Firefox for Android Firefox for Android Last updated: 2 weeks, 2 days ago 78% of users voted this helpful
No one has helped translate this article yet. If you already know how localizing for SUMO works, start translating now. If you want to learn how to translate articles for SUMO, please start here.

HTTPS-Only Mode is available in Firefox for Android. When it is enabled, Firefox will automatically establish secure, encrypted connections to websites whenever possible. This is especially useful when you are using a public Wi-Fi, where you can't be sure of the integrity of your internet connection. You can disable or enable this feature in your settings.

What is the difference between HTTP and HTTPS?

HTTP stands for Hypertext Transfer Protocol. It is the fundamental protocol for the web and encodes basic interactions between browsers and web servers. The problem with the regular HTTP protocol is that the data transferring from server to browser is not encrypted, meaning data can be viewed, stolen, or altered.

HTTPS protocols fix this by using either TLS (Transport Layer Security) or SSL (Secure Sockets Layer). This creates a secure encrypted connection between the server and the browser, which protects sensitive information.

For example, when HTTPS-Only Mode is active and you visit a site with the http://example.com URL, Firefox will silently upgrade to https://example.com.

Enable or disable HTTPS-Only Mode

  1. Tap the menu button android menu icon
    Menu button - Template:menupreview
  2. Tap Settings.
  3. Tap HTTPS-Only Mode.
  4. Switch the toggle to the left to turn HTTPS-Only Mode off. Switch the toggle to the right to turn it on.
  5. If you turn HTTPS-Only mode on, select Enable in all tabs or Enable only in private tabs.

Secure site not available

Some websites only support HTTP and the connection cannot be upgraded. If HTTPS-Only Mode is enabled and an HTTPS version of a site is not available, you will see a “Secure site not available” page:

Android-SecureSiteNotAvailable

If you tap Continue to HTTP Site, you accept the risks and will visit an HTTP version of the site. HTTPS-Only Mode will be turned off temporarily for that site.

Tap Go Back (Recommended), or your device's back button, if you want to avoid an unencrypted connection.

Was this article helpful?

Please wait...

These fine people helped write this article:

Illustration of hands

Volunteer

Grow and share your expertise with others. Answer questions and improve our knowledge base.

Learn More