Extended Validation certificates once triggered a distinctive green address bar showing the verified company name, introduced in the mid-2000s as a strong visual trust signal for e-commerce and financial sites specifically. Chrome removed this distinct treatment in 2019, with other major browsers following a similar path.
The reasoning behind the removal
Usability research, including studies cited by browser vendors themselves, suggested most users didn't notice or understand the green bar's significance, and its absence wasn't meaningfully reducing susceptibility to phishing — undermining the original rationale for the distinct UI treatment.
What EV certificates still offer today
EV certificates still provide their underlying rigorous validation and audit trail — what's changed is that this no longer translates into a distinct browser UI treatment, meaning EV's practical value today is more about the verification process itself (useful for specific compliance or trust contexts) than a visible visitor-facing badge.
The specific research that most directly influenced Chrome's decision
Chrome's own security UX team published research and blog posts around the time of the 2019 change citing internal usability studies that found users' trust decisions were only weakly, if at all, correlated with the presence of the green EV indicator — a rare case of a browser vendor publicly documenting the specific research rationale behind a major security UI change.
How certificate vendors responded to the change
Major CAs generally accepted the change without significant public pushback, since EV certificates retained their sales value through validation rigor and warranty tier even without the browser badge — several vendors updated their own marketing materials to emphasize these remaining benefits rather than the now-defunct visual treatment.
What alternative approaches were considered before settling on full removal
Before settling on complete removal, some browser teams reportedly considered intermediate options — modifying the visual treatment rather than eliminating it entirely, or pairing it with contextual explanatory text — but ultimately concluded that incremental tweaks were unlikely to meaningfully change the underlying usability problem the research had identified, favoring a cleaner removal instead.
How this decision was received by the broader security community
Reception among security researchers was largely, though not universally, supportive — most agreed the usability data justified the change, while a smaller group of dissenting voices argued the removal discarded a potentially useful signal without adequately exploring whether better user education could have salvaged its original intended value.
What this means for anyone building new security UI today
Product and security teams designing any new visible trust or security indicator today frequently cite the EV green bar case specifically as a cautionary example, treating rigorous, realistic usability testing against actual threat scenarios as a prerequisite before investing in a new visual security signal, rather than assuming face-value design logic will translate into real user protection.
How this connects back to the padlock's own broader simplification story
The EV green bar's removal is best understood as one specific, well-documented chapter within the much broader, decade-plus story of browser address bar simplification covered in our dedicated padlock icon history — both reflect the same underlying shift, as HTTPS became overwhelmingly the norm, browsers progressively reduced how much visual attention they gave to signaling it, rather than continuing to add or maintain increasingly granular trust-tier distinctions most users never fully understood.
What would need to be true for a similar feature to succeed today
Any future browser vendor considering a comparable visible trust-tier indicator would likely need to pair it with genuine user education efforts and rigorous, ongoing usability validation from the outset, rather than assuming, as EV's original designers reasonably but incorrectly did, that visibility alone would translate into meaningful behavioral change.
EV's UI removal remains one of the better-documented examples of a security feature being retired based on evidence rather than intuition.