> ## Content Index > Fetch the complete content index at: https://blog.addpipe.com/llms.txt > Use this file to discover other available public pages before exploring further. # Chrome 60: Flash No Longer Permitted to Access Microphone and Camera On Insecure Origins - URL: https://blog.addpipe.com/microphone-camera-access-no-longer-works-insecure-origins/ - Published: 2017-08-11T12:50:44.000Z - Updated: 2026-05-21T08:26:33.000Z - Author: Remus - Tags: Product Updates, #Import 2026-05-22 13:18 *July 2018 edit: made it more clear that this change applies to the Flash plugin as HTML5 mic/webcam access was already restricted to https and localhost since Chrome 47.* Starting with Chrome 60 microphone and camera access is no longer permitted to the Flash plugin on insecure origins (http). [Initially reported as a potential bug](https://bugs.chromium.org/p/chromium/issues/detail?id=737450&can=1&q=camera%20insecure%20origins&colspec=ID%20Pri%20M%20Stars%20ReleaseBlock%20Component%20Status%20Owner%20Summary%20OS%20Modified) it was confirmed in the [3rd comment](https://bugs.chromium.org/p/chromium/issues/detail?id=737450#c3) by a Chrome developer that this behaviour is expected. It was a deliberate decision to deprecate camera and microphone access on insecure origins. The closing of a [Chromium issue](https://codereview.chromium.org/2886363002/#ps1), that was referring to flipping the `kRequireSecureOriginsForPepperMediaRequests` to be enabled by default, confirms this. Pepper Flash is the variant of Flash plugin used by Chrome. According to [this article](https://sites.google.com/a/chromium.org/dev/Home/chromium-security/deprecating-powerful-features-on-insecure-origins), along with the camera and microphone access, other powerful features have been deprecated on insecure origins: geolocation, device motion/orientation, EME, AppCache and notifications. HTML5’s `getUserMedia()` was already limited to secure origins since Chrome 47 in 2015 ([source 1](https://nimblea.pe/monkey-business/2015/09/14/getusermedia-will-require-https-soon/) [source 2](https://developers.google.com/web/updates/2015/10/chrome-47-webrtc)). The change was not visible to the majority of users until [the release of Chrome 60 on the stable channel](https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html) on the 25th of July. In Chrome 60, when Flash tries to access the camera and microphone from insecure origins, a message is shown in Chrome’s developer console: ![Error shown in Chrome’s developer console when attempting to access the camera or microphone through Flash](https://blog.addpipe.com/content/images/2017/08/Image-1.png) > Microphone and Camera Access No Longer Works On Insecure Origins. To use this feature, you should consider switching your application to a secure origin, such as HTTPS. See for more details. ### What Can Be Done We strongly recommend switching your website, where you have Pipe embeded, to secure origins (https). *localhost* is considered secure so webcam/mic access will continue to work when you test locally.