HTTPS-Only Mode is automatically enabled in Firefox for Android, versions 100 and later. For every website you visit, Firefox will automatically establish a secure, encrypted connection over HTTPS whenever possible. This is especially useful when you are using a public Wi-Fi, where you can’t be sure of the integrity of your internet connection. You can disable or enable this feature in your settings.
Table of Contents
What is the difference between HTTP and HTTPS?
HTTP stands for Hypertext Transfer Protocol. It is the fundamental protocol for the web and encodes basic interactions between browsers and web servers. The problem with the regular HTTP protocol is that the data transferring from server to browser is not encrypted, meaning data can be viewed, stolen, or altered.
HTTPS protocols fix this by using either TLS (Transport Layer Security) or SSL (Secure Sockets Layer). This creates a secure encrypted connection between the server and the browser, which protects sensitive information.
For example, when HTTPS-Only Mode is active and you visit a site with the
http://example.com URL, Firefox will silently upgrade to
Enable or disable HTTPS-Only Mode
Tap the menu button.
- Tap .
- Tap .
- Switch the toggle to the left to turn HTTPS-Only Mode off. Switch the toggle to the right to turn it on.
- If you turn HTTPS-Only mode on, select or .
Secure site not available
Some websites only support HTTP and the connection cannot be upgraded. If HTTPS-Only Mode is enabled and an HTTPS version of a site is not available, you will see a “Secure site not available” page:
If you tap, you accept the risks and will visit an HTTP version of the site. HTTPS-Only Mode will be turned off temporarily for that site.
Tap, or your device's back button, if you want to avoid an unencrypted connection.