I have searched frequently for a way to do this and never found a good answer, though there have been tickets created in the past (#142818 & #405549).

Apparently, the chromium devs have failed to create a chrome://flags override for "broken" SSL and/or password saving. This would seem to be the easiest way to fix this annoying "feature" (via flags). I DO understand completely why they block it by default.

Since there is no override to my knowledge, I had assumed that you would need to import the given self-signed certificate to a trusted root area in (Windows) store. This does not appear to work either.

Has anyone been able to get this to work? I can live with the warning - just not the lack of password saving. I spent most of my workday in a dev environment and need to keep re-entering passwords dozens of times a day (copy/paste).

  • Importing your self-signed cert into the Windows certificate store does work for Chrome, I do this all time. How are you importing it and into which store? – heavyd Aug 15 '17 at 16:08
  • Last attempt - Import self-signed .cer format into "Trusted Root Cert Auths./Certificates" – bshea Aug 15 '17 at 19:51
  • Not to state the obvious, but wouldn't be a bit easier if Chrome just added a flag override for us? Anyway, if you can point me in right direction or tell me what I am doing wrong please do :) – bshea Aug 15 '17 at 20:00
  • Importing your self-signed cert into the Windows certificate store does not work for me, too – Ivan Jan 19 '18 at 10:01

I did not know about this option before today, but it appears that Chrome does have a flag for allowing insecure certificates from the localhost origin. This option is available from the chrome://flags/#allow-insecure-localhost page:


This will only help you for self-signed certificates on the localhost origin, and I have not tested it to see if it actually fixes your problem with the password manager, but it looks promising.

  • Wasn't sure who answered first so gave the approve to first one. Flag doesn't cover all I needed it to, but will help.. – bshea Aug 16 '17 at 14:59
  • 2
    @bshea, FYI hovering over the "answered XX minutes/hours/days ago" label will display and exact timestamp. – heavyd Aug 16 '17 at 15:31
  • 2
    I wish chrome flags would support a complete override on cert checks (or specifically password saving from non-localhost source). There is a nice warning about using flags.. so I don't see why they don't. Liability i guess. – bshea Aug 16 '17 at 19:33
  • 1
    @bshea, yeah I think they're trying to be security conscious. If the flag is there, then lazy website owners or malicious actors may instruct users to go flip the flag to enable their bad practices. If the flag is not there, there is no bypass – heavyd Aug 16 '17 at 20:17
  • This didn't work for me. What worked for me was to generate a self-signed certificate and adding it to the system truststore as always trusted. – Vic Seedoubleyew Jun 10 at 17:28

Alternatively, you can start Chrome with a command line switch --unsafely-treat-insecure-origin-as-secure="http://example.com" or go to chrome://flags/#unsafely-treat-insecure-origin-as-secure and enter your unsafe origin, e.g. http://example.com.

  • Nice. Hadn't seen that flag/switch before. Can you also save a password for that 'bad ssl' domain? – bshea Jan 23 at 23:13
  • Didn't work for me either. I had to generate a self signed certificate and add it to system truststore – Vic Seedoubleyew Jun 10 at 17:29

Navigate to chrome://flags/#allow-insecure-localhost (or just right click this link and click "Open link in new tab").

Then click "Enable".

Just be extremely wary that this is a major security flaw.

Edit: link no longer works due to the fact that Chrome no longer allows hyperlinks to the Chrome protocol due to security regarding the use of url encoding in hyperlinks to the protocol. Certain url-encoded strings would crash older versions of chrome. Rather than fixing this issue, they completely eliminated the option for hyperlinks. So just navigate to that location by copying and pasting the link.

  • That flag is news to me. Not quite what i needed (localhost only), but it will certainly help.. Thanks. – bshea Aug 16 '17 at 14:55
  • just FYI - the link doesn't work – redbeam_ Jun 19 at 15:10

i suggest you to use macro (iMacros) instead break the security default of chrome and that's better to protect you from virus


  • download iMacros chrome extension
  • install it
  • create chrome new tab
  • open i macros
  • then move To record section and press record
  • at new tab go to login page
  • fill your username and password
  • press login
  • then stop record and save page

and voila now you can play your recorded macro in bookmark section to login effortlessly

  • 1
    Welcome to Super User! Could you edit your answer to make it clear how it is answering the question? – Glorfindel Feb 24 at 13:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.