LightAtom

Safari Can't Establish a Secure Connection: Fixes

Safari couldn't complete an HTTPS connection to the site: a clock, proxy, content filter or VPN on your side, or an outdated server configuration.

Safari Can't Establish a Secure Connection to the Server

Safari tried to set up an encrypted connection to the website and the setup failed, so the page wasn't loaded.

Quick checks

  • Try the site in Chrome or Firefox.
  • Check the date and time.
  • Turn off iCloud Private Relay, VPNs and content blockers temporarily.

Fixes on Mac

  1. Check iCloud Private Relay

    1. System Settings › [your name] › iCloud › Private Relay: turn it off briefly and reload. Some networks and sites don't work with it.
  2. Disable content blockers and extensions

    1. Safari › Settings › Extensions: turn extensions off, then retry.
  3. Remove proxies and filters

    1. System Settings › Network › Wi-Fi › Details › Proxies; check Login Items & Extensions › Network Extensions for filters.
  4. Clear website data

    1. Safari › Settings › Privacy › Manage Website Data: remove the site.

Fixes on Windows

  1. Not applicable

    1. Safari isn't available on Windows; use the browser's own error guide.

Other devices

  1. iPhone and iPad

    1. Settings › [your name] › iCloud › Private Relay: test with it off; check Date & Time is automatic.

Still not working?

If the site fails in every browser, its server likely uses outdated TLS or a broken certificate chain. Test with openssl s_client -connect example.com:443 -servername example.com and tell the site's owner.

See what’s happening

LightAtom's connections view shows whether Safari connects to a proxy or VPN app's address instead of the site's servers, and which process that is.

Frequently asked questions

Why can't Safari establish a secure connection?

The TLS handshake failed. Common causes: Private Relay or VPN conflicts, content filters, proxies, a wrong clock, or a site using outdated encryption.

Can iCloud Private Relay cause this?

Yes, on some networks and sites. Turn it off for that network (Wi-Fi details › Limit IP Address Tracking also affects it) or briefly to test.

Why does the site work in Chrome but not Safari?

Different settings apply: Safari uses Private Relay and its own extensions. Disable those to compare.

LightAtom team

The people who build LightAtom, a network monitor for macOS.