How to turn off TLS 1.0 and TLS 1.1 on your website

Last reviewed October 1, 2026

TLS is the encryption behind HTTPS. Versions 1.0 and 1.1 were formally retired in 2021, and every modern browser supports TLS 1.2 or newer.

Leaving the old versions switched on doesn’t help any real visitor, but it keeps known weaknesses available.

Check your own site for this in about a minute

Old, weak encryption is still switched on

What it is. Your server still accepts TLS 1.0 and 1.1, which were retired years ago.

Why it matters. Modern browsers don’t need them, and they keep known weaknesses available to attackers.

Time to fix. About 5 minutes

# inside your server { } block, then: sudo nginx -s reload
ssl_protocols TLSv1.2 TLSv1.3;

# in your SSL config, then: sudo systemctl reload apache2
SSLProtocol -all +TLSv1.2 +TLSv1.3

SSL/TLS > Edge Certificates > Minimum TLS Version: TLS 1.2

Ask your host to allow only TLS 1.2 and TLS 1.3.

What it is. Your server’s best encryption is TLS 1.2. TLS 1.3 is faster and removes older, weaker options.

Why it matters. It isn’t urgent, but TLS 1.3 makes pages connect faster and closes off whole classes of old attacks.

Time to fix. About 5 minutes

# in your server { } block, then: sudo nginx -s reload
ssl_protocols TLSv1.2 TLSv1.3;

# in your SSL config, then: sudo systemctl reload apache2
SSLProtocol -all +TLSv1.2 +TLSv1.3

SSL/TLS > Edge Certificates > TLS 1.3: On

Ask your host to enable TLS 1.3 alongside TLS 1.2.