If a website's URL starts with "http://" instead of "https://", or if the lock icon is missing or crossed out in your browser's address bar, the site is not using HTTPS.