How to fix
SSL_ERROR_HANDSHAKE_FAILURE_ALERT error
on Windows

I can't open some websites and instead, I see the error code  SSL_ERROR_HANDSHAKE_FAILURE_ALERT. This does not always happen so I don't even see a pattern. How can I resolve this? I am using Chrome on Windows.

SSL_ERROR_HANDSHAKE_FAILURE_ALERT is one of the most common SSL/TL-related browser errors when trying to access secure websites. This means that your browser and the website failed in an initial "handshake," which is a critical phenomenology involved in any establishment of a secure connection.

This usually includes key exchange, the verification of various certificates, and the establishment of secure protocols. Once the handshake fails, an error message appears with a high degree of likelihood that there is incompatibility of security settings, issues dealing with certificates, or perhaps outdated browser or system configurations.

Users commonly report that the source of such problems can be located in several places: unsupported and older SSL/TLS protocols, expired or untrusted certificates, or poorly set security settings on the client side.

In some user-experience cases, Windows updates completely disable support of older SSL protocols to maintain compatibility issues with websites using only newer protocols. Sometimes antivirus programs and firewalls block identified dangerous connections initiated by applications or if the settings are overly restrictive.

To address this, there are multiple potential solutions, such as updating security protocols, adjusting browser or network settings, and verifying your system time and date (incorrect settings can interfere with certificate validation).

Clearing your browser cache and checking for any restrictive firewall or antivirus rules can also help to fix the SSL_ERROR_HANDSHAKE_FAILURE_ALERT error. Further, updating both Windows and your browser to the latest versions is crucial, as updates often address SSL/TLS compatibility issues and vulnerabilities.

For a comprehensive approach to fix underlying system issues, you can consider using [d1] PC repair tool, which detects and repairs common Windows problems efficiently.

Fix 1. Update your browser

Outdated browsers may lack support for the latest SSL/TLS protocols, leading to handshake failures. Ensuring your browser is updated can improve compatibility with secure sites.

Google Chrome

• Open Google Chrome.
• Click the three dots in the upper-right corner to open the menu.
• Select Help, then About Google Chrome.
• Chrome will check for updates.
• If any are found, they will be installed automatically.
• Finally, Relaunch the browser.

Microsoft Edge

• Open Microsoft Edge.
• Click on Settings and more (three horizontal dots).
• Select Help and feedback > About Microsoft Edge.
• Your browser should be updated, then restart it.

Mozilla Firefox

• Open Firefox.
• Click on three horizontal lines and select Help.
• Pick About Firefox.
• Your browser should update.
• Once done, click Restart to update Firefox.

Fix 2. Clear browser cache

Clearing the browser cache can remove outdated SSL/TLS data that may be causing the handshake failure.

Google Chrome

• Click on Menu and select Settings.
• Under Privacy and security, pick Clear browsing data.
• Select All time under the time range.
• Select Browsing history, Cookies and other site data, as well as Cached images and files.
• Click Clear data.

MS Edge

• Open Edge and click on three horizontal dots (Settings and more).
• Select Settings and then pick Privacy, search, and services on the left.
• On the right side of the window, scroll down to find the Clear browsing data section.
• Click Choose what to clear.
• Select All time under the time range.
• Pick all the sections and click Clear now.

Mozilla Firefox

• Click on the menu button (three horizontal lines) in the upper-right corner of the Firefox window.
• Select Settings from the drop-down menu.
• From the panel on the left side, click on Privacy & Security.
• Scroll down to the Cookies and Site Data section, and click on Clear Data.
• Ensure both boxes for Cookies and Site Data and Cached Web Content are checked, and then click on Clear.

Fix 3. Verify date and time settings

Incorrect date and time settings can prevent SSL certificates from being validated properly, leading to connection issues.

• Type in Control Panel in Windows search and press Enter.
• Go to Clock and Region and click on Date and Time.
• Pick the Internet Time tab and select Change Settings.
• Make sure that Synchronize with an Internet time server box is ticked.
• Click Update now and OK.

Fix 4. Disable browser extensions

Certain extensions, especially security-focused ones, can interfere with SSL/TLS connections. Disabling them can help determine if they’re causing the error.

• Open Settings and go to More tools.
• Select Extensions.
• Here, you will find the list of the installed extensions.
• You can either delete them by pressing Remove or toggling the switch to disable them.

Fix 5. Adjust SSL/TLS settings in the browser

Your browser may have certain SSL/TLS protocols disabled, which can lead to handshake errors with some websites. Enabling these protocols can help.

• Type Internet Options in Windows search and press Enter.
• Go to the Advanced tab.
• Scroll down to the Security section.
• Find the following sections: Use SSL 3.0, Use TLS 1.1, Use TLS 1.2, and Use TLS 1.3.
• Check or uncheck the boxes next to these protocols based on your troubleshooting needs. For security, it’s recommended to keep only TLS 1.2 and 1.3 enabled.
• Click Apply and then OK.
• Restart your computer.

Fix 6. Disable antivirus SSL scanning

Many antivirus programs have an SSL scanning feature that can block secure connections if they detect risks. Disabling it temporarily can help.

• Open your antivirus software and go to Settings.
• Locate the SSL scanning or HTTPS scanning feature.
• Disable this feature, then try visiting the website.

Fix 7. Update Windows

Windows updates often contain security protocol updates, so keeping your system updated can improve SSL/TLS compatibility.

• Type Updates in Windows search and press Enter.
• Here, click Check for updates or Install updates if already downloaded.
• Wait till Windows downloads and installs all the files.
• If optional updates are available, install them as well.
• Reboot your computer.

Fix 8. Reset network settings

If none of the previous fixes resolve the issue, resetting your network settings can clear any configuration conflicts impacting the SSL/TLS handshake.

• Type cmd in Windows search.
• Right-click on Command Prompt result and pick Run as administrator.
• In the new window, copy and paste the following commands, pressing Enter after each:
  ipconfig /flushdns
  ipconfig /registerdns
  ipconfig /release
  ipconfig /renew
  netsh winsock reset
• Wait for each of the commands to be executed.
• Close down Command Prompt.