Referrer-Policy header missing: what it is, why it matters, and how to fix it
This site does not send a Referrer-Policy HTTP header, which controls how much referrer information is included when navigating away from your site.
Where this fits: security in SEO
Why referrer-policy header missing hurts your rankings
Without a Referrer-Policy, the browser uses the default behavior, which may send the full URL (including query parameters with sensitive data) to external sites. This can leak private information and internal URL structures. Setting a strict referrer policy protects user privacy and your site's internal architecture.
This is a low-severity issue: a polish item. Fix it in batches during scheduled maintenance; the win is cumulative quality, not a step change.
How to fix it
Add a Referrer-Policy header to your server responses. Use 'strict-origin-when-cross-origin' as a balanced default that sends the origin to cross-origin requests but the full URL to same-origin requests.
Referrer-Policy: strict-origin-when-cross-originFrequently asked questions
What does "Referrer-Policy header missing" mean?
This site does not send a Referrer-Policy HTTP header, which controls how much referrer information is included when navigating away from your site.
Why does referrer-policy header missing matter for SEO?
Without a Referrer-Policy, the browser uses the default behavior, which may send the full URL (including query parameters with sensitive data) to external sites. This can leak private information and internal URL structures. Setting a strict referrer policy protects user privacy and your site's internal architecture.
How do I fix referrer-policy header missing?
Add a Referrer-Policy header to your server responses. Use 'strict-origin-when-cross-origin' as a balanced default that sends the origin to cross-origin requests but the full URL to same-origin requests.
How serious is this issue?
This is a low-severity issue: a polish item. Fix it in batches during scheduled maintenance; the win is cumulative quality, not a step change. It belongs to the security family of checks.
How do I find every page affected by this on my site?
Run a free Dr Urls audit: it crawls your site, detects referrer-policy header missing on every affected page, shows example URLs, and generates a ready-to-use fix task. Re-scan after fixing to verify the issue is gone.
Does your site have this issue?
A free Dr Urls audit crawls your site, finds every page affected by referrer-policy header missing, and hands you a ready-made fix task.
Check my site free