← Back to glossary

A rule that forces your browser to use HTTPS for a site.

Definition

HSTS tells your browser “always use HTTPS for this website,” so it won’t fall back to insecure HTTP.

In plain English A rule that forces your browser to use HTTPS for a site.

Why this matters

Why it matters: It helps prevent man‑in‑the‑middle attacks that try to downgrade connections.

Example

Example: A bank website enables HSTS so logins always use HTTPS.