Avast Antivirus: HTTPS scanning in Web Shield - FAQs
Frequently Asked Questions
What is HTTPS scanning in Avast Antivirus?
HTTPS scanning is a feature of Web Shield in Avast Antivirus and is automatically enabled when Avast is installed. HTTPS scanning decrypts and scans encrypted traffic to detect potential malware contained on sites using HTTPS connections.
What is HTTPS?
HTTPS (Hyper Text Transfer Protocol Secure) is a more secure version of the standard HTTP connection. HTTPS adds encryption which prevents others from eavesdropping, and helps ensure that you are connected to the intended server.
For detailed information about HTTPS, refer to the wikipedia page below:
What is the benefit of HTTPS scanning?
While an HTTPS connection ensures that the connection can not be modified by anyone else, it does not guarantee that the content contained on the site is clean. Malware scripts and binaries can be placed into an HTTPS page that appears to be safe. The HTTPS scanning feature prevents you from downloading malicious content from sites secured with an HTTPS connection onto your PC.
Is the HTTPS connection still secure when Avast scans it?
When the Avast Web Shield scans the HTTPS connection, the data being scanned remains encrypted and secure. While HTTPS scanning is in effect, the Web Shield and your browser are on the same PC.
Is all my web traffic sent to the Avast servers?
No, all scanning occurs locally on your PC during the HTTPS connection. No one outside of your PC can read or decipher the connection.
Does Avast scan all secure connections?
When HTTPS scanning is enabled, Avast scans all HTTPS connections for potential malware except for verified sites which have been added to our whitelist. This list primarily contains banking sites. If your bank is not on this list, or you want to exclude a certain site from HTTPS scanning, you can verify the site's security certificate and submit it via email to firstname.lastname@example.org.
Alternatively, you can disable the HTTPS scanning feature.
How do I disable HTTPS scanning in Avast?
While it is recommended to keep HTTPS scanning enabled, you can disable the feature. Open the Avast user interface, and go to Settings ▸ Components. Click Customize next to WebShield, and untick the box next to HTTPS scanning. For detailed instructions, read the article below:
- Avast Premier 17.x
- Avast Internet Security 17.x
- Avast Pro Antivirus 17.x
- Avast Free Antivirus 17.x
- Microsoft Windows 10 Home / Pro / Enterprise / Education
- Microsoft Windows 8.1 / Pro / Enterprise
- Microsoft Windows 8 / Pro / Enterprise
- Microsoft Windows 7 Home Basic / Home Premium / Professional / Enterprise / Ultimate - Service Pack 1, 32 / 64-bit
- Microsoft Windows Vista Home Basic / Home Premium / Business / Enterprise / Ultimate - Service Pack 2, 32 / 64-bit
- Microsoft Windows XP Home / Professional / Media Center Edition - Service Pack 3, 32-bit