Bypass the Chrome Invalid SSL Certificate/HSTS block by keying in the phrase ‘thisisunsafe’

  • Web-Tech

The Google Chrome browser will not allow a user to visit a website when it detects a SSL certificate/HSTS error. This is right thing in terms of security, but during development I often hit this block which is annoying. There is an easy way to bypass this Chrome block, simply key-in this phrase when Chrome presents the ‘Invalid Cert’ page:

thisisunsafe
Bypass Chrome’s ‘Invalid Cert’ page by typing the following on your keyboard: thisisunsafe

The Chrome browser essentially has a listener on the keyboard for the key press sequence thisisunsafe. When that sequence is entered the window will then drop the block and the page will render, but with a ‘Not Secure’ warning in the location bar:

After keying in ‘thisisunsafe’ to bypass Chrome’s ‘Invalid Cert’ block, the desired page will render but with a ‘Not Secure’ warning on the location bar.

This seems to be an internal/undocumented Chrome feature so there is not a whole lot of info about it. This Stackoverflow article gives the most info about it: Does using ‘badidea’ or ‘thisisunsafe’ to bypass a Chrome certificate/HSTS error only apply for the current site? [closed]

Leave a Reply

Your email address will not be published. Required fields are marked *