“HTTPS was originally so rare that at one point Internet Explorer popped up an alert to notify users that the connection was protected by HTTPS, reminiscent of the ‘Everything’s OK’ alarm from The Simpsons. When HTTPS was rare , the lock icon drew attention to the additional protections provided by HTTPS.<\/p>\n
Today, that’s no longer true, and HTTPS is the norm, not the exception, and we’ve been evolving Chrome accordingly.”<\/p>\n
The lock icon is misleading<\/h2>\n
It may seem counterintuitive, but Google’s research revealed that the lock icon lulls users into a false sense of security.<\/p>\n
The lock icon does not mean that a site is safe. It just means that the connection is made using a secure protocol.<\/p>\n
Users incorrectly assume that the lock icon means the site is safe and therefore automatically trust the site they are visiting.<\/p>\n
This is a potentially harmful perception because phishing and malware sites often display the lock icon.<\/p>\n
Google research shows that consumers continue to associate the padlock icon with security.<\/p>\n
“We redesigned the lock icon in 2016 after our research showed that many users didn’t understand what the icon was conveying.<\/p>\n
Despite our best efforts, our research in 2021 showed that only 11% of study participants correctly understood the precise meaning of the padlock icon.<\/p>\n
This misunderstanding is not harmless: almost all phishing sites use HTTPS and therefore also display the lock icon.<\/p>\n
Misunderstandings are so widespread that many organizations, including the FBI, publish explicit guidance that the padlock icon is not an indicator of website security.”<\/p>\n
Lock icon Emphasis<\/h2>\n
Chrome has been in the process of de-emphasizing the lock icon for the past five years, starting in 2018 when they proposed changing the icon.<\/p>\n
There used to be a prominent word, Secure, written in green.<\/p>\n
The proposal was to remove the word.<\/p>\n
Here’s a screenshot from the Chrome blog post:<\/strong><\/p>\n<\/p>\n The removal of the lock icon can be seen as part of the natural evolution of the web and what users need.<\/p>\n Google is updating the HTTPS icon to more accurately communicate a website’s HTTPS status as secure, but without inadvertently implying security.<\/p>\n The new icon is what is known as the melody icon.<\/p>\n Google Font shows these as examples of tuning icons:<\/strong><\/p>\n Chrome’s statement explained the reasons for choosing a tuning icon:<\/strong><\/p>\n “We think the melody icon:<\/p>\n Does not imply “reliable” More obviously clickable Commonly associated with settings or other controls”<\/p>\n Chrome will continue to alert users when there is an insecure connection.<\/p>\n The redesigned icon will debut in Chrome 117, currently scheduled for September 2023.<\/p>\n Chrome announced that the change is scheduled for both the desktop and Android versions.<\/p>\n They’re going to remove the icon entirely from the iOS version of Chrome because it’s untouchable.<\/p>\n Read Chrome’s official announcement:<\/strong><\/p>\n An update to the lock icon<\/a><\/p>\n Featured image by Shutterstock\/Orange Vectors<\/p>\nNew HTTPS Tune icon<\/h2>\n
![\"Tuning](\"https:\/\/www.searchenginejournal.com\/wp-content\/uploads\/2023\/05\/tune-icons-6451aef299784-sej.png\"\/){kind=icon}
<\/p>\nAnd this is the new icon that Chrome will include:<\/h3>\n
![\"Chrome](\"https:\/\/www.searchenginejournal.com\/wp-content\/uploads\/2023\/05\/chrome-tune-icon-6451af15b20d8-sej.png\"\/){kind=icon}
<\/p>\n