# LocalWP not secure

**URL:** <https://community.localwp.com/t/localwp-not-secure/42657>\
**Category:** Support\
**Created:** [May 1, 2024, 6:11pm UTC](https://community.localwp.com/t/localwp-not-secure/42657 "2024-05-01T18:11:06Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![jpruim](https://avatars.discourse-cdn.com/v4/letter/j/ed655f/32.png) [@jpruim](https://community.localwp.com/u/jpruim)\
**Post date:** [May 1, 2024, 6:11pm UTC](https://community.localwp.com/t/localwp-not-secure/42657/1 "2024-05-01T18:11:06Z")

</div>

When either I click Open site or WP Admin the browsers - Chrome, Firefox & Opera indicate that my Local site is not secure. I have followed the following URLs instructions for fixing the problem:

> **[SSL Certificate on macOS](https://localwp.com/help-docs/getting-started/managing-local-sites-ssl-certificate-in-macos/)**
>
> In most cases, Local makes getting your offline development environment running HTTPS easy by providing a one-click solution for trusting a site’s SSL certificate. Occasionally, if that “trust”…

I have also installed Rosetta through terminal.  
_ **softwareupdate --install-rosetta** _  
This procedure fixed the problem in Safari but not for the other browsers.

* * *

 ![Screenshot Chrome](https://us1.discourse-cdn.com/flex019/uploads/lwpforums/original/3X/d/3/d34a0d43e2cb520ff9004ec9e1f57d80b6a666d6.png)  
 ![Screenshot Firefox](https://us1.discourse-cdn.com/flex019/uploads/lwpforums/original/3X/5/c/5c20da1548878d41bc257dcbae66a8de7562d5a5.png)  
 ![Screenshot Opera](https://us1.discourse-cdn.com/flex019/uploads/lwpforums/original/3X/c/e/cea085bf4ba1e5bcf022bf6c912031ee82364944.png)  
 ![Screenshot Safari](https://us1.discourse-cdn.com/flex019/uploads/lwpforums/original/3X/c/4/c4abb17d50e068a82c86e0f81e13f66c7d64d86a.png)

* * *

### System Details

Local Version 9.0.1+6673

MacOS Sonoma 14.4.1

* * *

### Local Logs

Attach your Local Logs here ([Help Doc - Retrieving Local’s Log](https://localwp.com/help-docs/troubleshooting/retrieving-locals-log-file/))  
[local-logs.zip](https://community.localwp.com/uploads/short-url/aipGi2i6NpA0zEk893d9wNWmFIZ.zip) (9.6 KB)

* * *

---

<div class="post-metadata">

**Author:** ![Nick-B](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nick-b/32/16140_2.png) [@Nick-B](https://community.localwp.com/u/Nick-B)\
**Post date:** [May 1, 2024, 8:44pm UTC](https://community.localwp.com/t/localwp-not-secure/42657/2 "2024-05-01T20:44:54Z")

</div>

Hi @jpruim

Did this work in a previous version of Local or was this your first attempt at using the app?

We also have some other troubleshooting steps here that you could try as well:

> **[SSL in Local](https://localwp.com/help-docs/getting-started/ssl-in-local/)**
>
> This doc will go over SSL basics, using SSL in Local, and some common issues. If you are experiencing issues and are also using macOS check out this doc. Table of Contents: Secure Sockets Layer (SSL)…

---

<div class="post-metadata">

**Author:** ![jpruim](https://avatars.discourse-cdn.com/v4/letter/j/ed655f/32.png) [@jpruim](https://community.localwp.com/u/jpruim)\
**Post date:** [May 1, 2024, 11:32pm UTC](https://community.localwp.com/t/localwp-not-secure/42657/3 "2024-05-01T23:32:11Z")

</div>

I had a previous, older install of MacOS. It Local worked fine then. I believe that I had the same version of Local installed. I updated my computer’s operating system to MacOS 14.4.1 and my computer started acting up in many ways, including problems with Mail and Local no longer working, so I rebuilt the operating system with a fresh install to the latest MacOS and most browsers still gave the Not Secure warning. Going thru the process outlined above, I was able to get Safari to apparently work properly, but Chrome, Firefox and Opera still say Not Secure. I have the Lock icon on Safari, so I’m guessing it is recognizing the SSL certificate. It says Trusted on the Local site page.

---

<div class="post-metadata">

**Author:** ![jpruim](https://avatars.discourse-cdn.com/v4/letter/j/ed655f/32.png) [@jpruim](https://community.localwp.com/u/jpruim)\
**Post date:** [May 2, 2024, 1:20am UTC](https://community.localwp.com/t/localwp-not-secure/42657/4 "2024-05-02T01:20:50Z")

</div>

I deleted my site and rebuilt it. It goes to “pronouncedprime.local” now instead of “[https://pronouncedprime.local](https://pronouncedprime.local)”. The SSL Certificate appears to be trusted on Safari, Chrome and Opera now when I type in the URL manually.

## Firefox gives me this warning:

Warning: Potential Security Risk Ahead

## Firefox detected a potential security threat and did not continue to **pronouncedprime.local**. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.

I ran the following in the Site Shell from Local that opened in Terminal:  
wp search-replace ‘[http://pronouncedprime.local](http://pronouncedprime.local)’ ‘[https://pronouncedprime.local](https://pronouncedprime.local)’

Terminal said that it changed 9 instances or something like that.

I get the same results, no changes. Local doesn’t take me to “https://” when I click the Open Site button. I tried quitting Local and restarting with same results. I tried quitting Local, turning off my firewall, relaunching Local. Same results. Firewall is back on now.

---

<div class="post-metadata">

**Author:** ![jpruim](https://avatars.discourse-cdn.com/v4/letter/j/ed655f/32.png) [@jpruim](https://community.localwp.com/u/jpruim)\
**Post date:** [May 2, 2024, 1:24am UTC](https://community.localwp.com/t/localwp-not-secure/42657/5 "2024-05-02T01:24:39Z")

</div>

![Firefox - Warning Potential Security Risk Ahead](https://us1.discourse-cdn.com/flex019/uploads/lwpforums/original/3X/c/6/c639381b95017f8284cb009d1a659995edc096cb.png)

---

<div class="post-metadata">

**Author:** ![Nick-B](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nick-b/32/16140_2.png) [@Nick-B](https://community.localwp.com/u/Nick-B)\
**Post date:** [May 2, 2024, 2:26pm UTC](https://community.localwp.com/t/localwp-not-secure/42657/6 "2024-05-02T14:26:01Z")

</div>

Hi @jpruim

Thank you for the updates here! So to sum it it’s not working everywhere except in Firefox? Or does it only work when typing in manually?

As another step in troubleshooting, have you tried clearing the cache and cookies on your browser and then closing your active sessions to start with a clean slate?

[How do I clear my browser’s cache?](https://getflywheel.com/wordpress-support/clear-browser-cache/)

You might also check on your network cache. There are some different things to try and get around network caching. Restarting your device, restarting the network router/modem, using a VPN connection, or adding a cache-breaking path to the end of the site that’s cached. Adding /? followed by any 4 random characters (/?1234 for example) will sometimes break the cache as well.

Additionally, does this happen with all sites? If you create a new, blank site for example now is the behavior the same?

---

<div class="post-metadata">

**Author:** ![jpruim](https://avatars.discourse-cdn.com/v4/letter/j/ed655f/32.png) [@jpruim](https://community.localwp.com/u/jpruim)\
**Post date:** [May 2, 2024, 5:50pm UTC](https://community.localwp.com/t/localwp-not-secure/42657/7 "2024-05-02T17:50:49Z")

</div>

Currently it now works everywhere except Firefox, if I add “https://” to pronouncedprime.local

But otherwise browsers don’t have the lock symbol, have a lock with a red line through it or simply say Not Secure.

---

<div class="post-metadata">

**Author:** ![Nick-B](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nick-b/32/16140_2.png) [@Nick-B](https://community.localwp.com/u/Nick-B)\
**Post date:** [May 3, 2024, 1:41pm UTC](https://community.localwp.com/t/localwp-not-secure/42657/8 "2024-05-03T13:41:49Z")

</div>

I know you mentioned rebuilding your site at some point but if you create a new, blank site in Local and Trust the SSL is the behavior the same for that one?

---

<div class="post-metadata">

**Author:** ![jpruim](https://avatars.discourse-cdn.com/v4/letter/j/ed655f/32.png) [@jpruim](https://community.localwp.com/u/jpruim)\
**Post date:** [May 3, 2024, 3:00pm UTC](https://community.localwp.com/t/localwp-not-secure/42657/9 "2024-05-03T15:00:37Z")

</div>

Same results with a fresh site build. I changed the name to PronouncedPrime01. I went through the process of Always Trust the SSL Cert in Keychain Access. Then the SSL Cert worked in all browsers when changing “pronouncedprime01.local” to “[https://pronouncedprime01.local](https://pronouncedprime01.local)” in the browsers URL field. This worked for all browsers except Firefox which is still says “Not Secure”, “Warning: Potential Security Risk Ahead”. I ran Site Shell to replace ‘[http://pronouncedprime01.local](http://pronouncedprime01.local)’ with ‘[https://pronouncedprime01.local](https://pronouncedprime01.local)’ with no effect. Terminal told me it “Made 9 replacements”. Since Site Shell didn’t help, I ran Better Search Replace plug-in as a dry run for good measure. Better Search Replace found no instances to replace.

I think I’d be happy at this point if I could just get Local’s “WP Admin” and “Open Site” buttons to got to “[https://pronouncedprime01.local](https://pronouncedprime01.local)” instead of “pronouncedprime01.local”

---

<div class="post-metadata">

**Author:** ![Nick-B](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/nick-b/32/16140_2.png) [@Nick-B](https://community.localwp.com/u/Nick-B)\
**Post date:** [May 3, 2024, 3:44pm UTC](https://community.localwp.com/t/localwp-not-secure/42657/11 "2024-05-03T15:44:33Z")

</div>

I checked with our Local devs on this, and they reminded me that the issues you’re facing have already been on our radar, and bugs have been filed. Specifically, there is an issue with [Firefox not trusting our certs](https://community.localwp.com/t/help-installing-ssl-on-mac/42441/2), and then there is another bug with our Open Site widget not opening directly in HTTPS. As mentioned, both of these have been filed with bugs for the team already so for now, your best bet will be to utilize a browser other than Firefox and manually update the HTTPS protocol as you have been.

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/community.localwp.com/system/32/1_2.png) [@system](https://community.localwp.com/u/system)\
**Post date:** [August 1, 2024, 3:45pm UTC](https://community.localwp.com/t/localwp-not-secure/42657/12 "2024-08-01T15:45:16Z")

</div>

Closed on August 1, 2024, 3:45pm UTC

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
