Security Notice Bug...
 
Notifications
Clear all

Security Notice Bug Appearing on CapCut PC

19 Posts
4 Users
1 Reactions
928 Views
f807b5609eae64257bf4877652ea49fee40ac2451c152c12fa596ffeda647157?s=80&r=g
Posts: 0
 Jay
(@Jay)
Joined: 1 second ago

The only method that works for me is to format my computer and delete all files. Which is very hassle to do.


Reply
CapCut Edit
Posts: 853
Admin
(@admin)
Member
Joined: 2 years ago

This issue strongly points to a server/verification check that is failing when CapCut reaches the network.

Below we have complied targeted, advanced steps which you can try until CapCut developers fix this issue:

Quick checks to do..

  1. Make sure Windows time/date is exact and set to automatic (Settings → Time & language → Date & time). Many TLS / verification failures happen when the system clock is wrong.

  2. Disable any system-wide adblockers / Pi-hole / router DNS-blocking temporarily (these can hide CapCut/TikTok endpoints). These checks are fast and resolve server-verification errors.

Advanced network / system fixes to try:

Check & clean your hosts file

Open Notepad as Administrator, then open:

C:\Windows\System32\drivers\etc\hosts

Remove any lines that reference capcut, tiktok, bytedance, or any suspicious entries that redirect hosts to 127.0.0.1 or 0.0.0.0. Save file.

  • a hosts entry can silently block/redirect verification servers and trigger a security notice.

Flush DNS, reset Winsock and TCP/IP stack

Open Command Prompt as admin and run these three commands:

ipconfig /flushdns netsh winsock reset netsh int ip reset

Restart computer afterwards.

  • corrupt DNS cache or Winsock issues can make app-to-server handshakes fail even when browser works. CapCut network errors can be resolved through resets.

Use a public DNS as a test

Temporarily set your NIC DNS to Cloudflare or Google:

  • IPv4 DNS: 1.1.1.1 and 1.0.0.1 (Cloudflare) or 8.8.8.8 and 8.8.4.4 (Google).

  • Reboot and test CapCut while online.

    • sometimes local ISP/resolver blocks or misroutes CDN endpoints.

Disable proxy & VPN & any “network filtering” apps

  • Settings → Network & internet → Proxy → make sure everything is OFF.

  • Temporarily uninstall/disable VPN/third-party network/security tools (including system-level ad-blockers, Fiddler, and loopback proxy apps).

If CapCut PC is working offline a proxy/VPN/region filter interferes with verification.

Reset Microsoft Store / Store licensing if Store version also failed:

  1. Run wsreset.exe (Start → type wsreset, Run as admin).

  2. If that does not help, re-register Store packages (PowerShell as admin):

Get-AppxPackage -allusers Microsoft.WindowsStore | 
Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
  1. Reinstall CapCut from the Store after doing the above.

The Store cache or package registration can block Store apps from performing license/online checks.

Add CapCut to Windows Firewall / AV allowlist and create outbound rule

  • If you use third-party antivirus, temporarily disable it.

  • Add an Outbound firewall rule to allow CapCut (CapCut.exe) full network access (or just remove restrictions).

  • Alternatively block CapCut’s network access as a test if it then no longer shows the Security Notice, the error is indeed coming from a specific verification call and you can work from there.

  • AV/firewall can interfere with the verification handshake.

Inspect what domains your CapCut app tries to contact

  • Use Resource Monitor (resmon.exe) → Network tab → launch CapCut and watch Network Activity to see the hostname/IP CapCut connects to.

  • Or use a simple tool like TCPView from Sysinternals to see active connections when you start CapCut.

That will show the endpoint that triggers the popup (example: CDN / verification host tied to ByteDance/TikTok). Once you have that hostname, you can:

  • Temporarily allow it through firewall, or

  • Search the hostname online to see if it’s blocked by your ISP/region.

This is how you find the exact failing endpoint rather than guess.

Update Windows Root Certificates & make sure TLS is enabled

  • Run Windows Update fully (sometimes root CA updates are required).

  • Ensure TLS 1.2 is enabled (most modern apps require it). You can check Internet Options → Advanced → ensure “Use TLS 1.2” is checked.

  • server verification requires valid certificate chains; expired/missing root certs or disabled TLS versions can break verification.

Workarounds for immediate continuity:

  1. Offline-first workflow — launch CapCut while offline, create your project, save it, then connect to the Internet only when necessary. This avoids the pop-up when you connect online but is not ideal long-term solution.

  2. Sandbox / VM — run CapCut inside a clean Windows VM or different user profile to test whether something in your main profile is causing the verification failure.

  3. Try a different network — tether to mobile data (phone hotspot) and test; if hotspot works, it's likely your router/ISP blocking endpoints.

If none of the above works

Please send us the results of quick diagnostic you can run now:

  1. Open an admin Command Prompt and run:

 
ipconfig /all > %userprofile%\desktop\network-info.txt
  1. While CapCut is running and connected, open Resource Monitor (resmon) → Network and list any remote hostnames that show for CapCut.exe (or take a screenshot of that Resource Monitor output).

Mainly this issue is primarily a network/verification failure and the next best step is to identify the endpoint.

If your CapCut works offline but errors when online, it is almost certainly failing a server/TLS/host verification which can be fixed by checking/cleaning the hosts file, flushing DNS + Winsock, disabling proxies/VPNs, resetting Microsoft Store cache, and either allowing or blocking the app in your firewall while you inspect which remote host is being contacted.


Reply
691a484540d8d414ab897f68eb68c4de349aae6a29bf2b8fde542744f5870d80?s=80&r=g
Posts: 2
(@akbar)
Joined: 1 day ago

i did everything (except VM) and still appear. 
https://imgur.com/a/HDNr3V5
https://imgur.com/a/Ufwy8xp


Reply
1 Reply
CapCut Edit
Admin
(@admin)
Joined: 2 years ago

Member
Posts: 853

Hi,

You have connections from CapCut to Google DNS (8.8.8.8) using TCP port 443.
This is not normal as CapCut should never talk to Google DNS over HTTPS and DNS is normally UDP/TCP 53, and HTTP-based DNS (DoH) uses domain endpoints, not raw IPs.

Seeing this pattern tells us that your PC is using forced or hijacked DNS-over-HTTPS routing

This is caused by one of three things:

A system-level VPN / privacy tool / DNS filter is still active even if you think it is disabled

Usually below are the problems:

  • Cloudflare WARP

  • NextDNS App

  • AdGuard Desktop

  • SimpleWall

  • Psiphon / HotspotShield leftovers

  • 360 Total Security / Avast privacy filters

  • Killer Intelligence Center / Intel Networking Services

  • Glary Utilities / SystemCare “web shield”

  • Old proxy entries left in the registry

These tools silently intercept all DNS and “upgrade” it to secure DNS via 8.8.8.8 or other resolvers. CapCut’s verification fails when DNS is intercepted, triggering the “Security Notice”.

Router-level DNS hijacking

Some ISPs, routers, or even malware override DNS and force 8.8.8.8, ignoring Windows settings.

A hidden Windows service doing DNS-over-HTTPS

Windows 11 sometimes enables DoH automatically, but CapCut does not support this path and fails verification.

Does the “Security Notice” appear even if you physically unplug the Ethernet cable, open CapCut offline, then plug the cable back only after the project loads?

 

How to proceed to fix this isseu?

The main reason of this problem seems to be forced DoH (DNS-over-HTTPS) through 8.8.8.8.

1 — Completely remove any hidden proxy settings

Open CMD as admin:

netsh winhttp reset proxy

Then:

Settings → Network → Proxy
Make sure:

  • Automatically detect settings = ON

  • Use setup script = OFF

  • Use a proxy server = OFF

Restart PC.

2 — Disable Windows DoH (DNS-over-HTTPS)

  1. Settings → Network & Internet → Properties

  2. Scroll to DNS server assignment

  3. Click Edit

  4. Set DoH = Off

  5. Preferred DNS: 1.1.1.1 or automatic

You MUST disable DoH because CapCut cannot complete its certificate handshake through DoH endpoints.

3 — Find & disable DNS-filtering services

Open services.msc and look for:

  • AdGuard Service

  • Cloudflare WARP

  • NextDNS

  • WFP Filters

  • AVAST Web Shield

  • Bitdefender TrafficLight

  • Fortinet / Cisco AnyConnect

  • GlassWire

  • SimpleWall

  • Kaspersky Secure Connection

  • NordVPN / SurfShark / ProtonVPN DNS services

If you see any of these:

  • Right-click → Stop

  • Startup type → Disabled

Reboot PC.

Even if you “never installed” them, they might remain from a previous tool or bundle.

4 — Check the HOSTS file again for DNS redirect entries

Open:

C:\Windows\System32\drivers\etc\hosts

Ensure there are no entries redirecting:

8.8.8.8 8.8.4.4 127.0.0.1 *.tiktok.com 127.0.0.1 *.bytedance.com

If yes then remove them.

5 — Force router to stop overriding DNS

Your router shows DNS = 8.8.8.8 from your ipconfig.
This might be overriding Windows DNS settings entirely.

Try:

  1. Log into router

  2. Navigate to WAN / LAN settings → DNS

  3. Change DNS to:

    • 1.1.1.1

    • 1.0.0.1

  4. Save + reboot router & PC

If the router was locking DNS, this single step fixes it instantly.

Why is this causing the problem:

CapCut attempts verification using ByteDance HTTPS endpoints.
When DNS is being intercepted through a resolver like Google DNS DoH, CapCut’s verification layer thinks it is under a MITM (man-in-the-middle) attack which triggers Security Notice.

Your TCPView shows:

  • 8.8.8.8:443 (DoH)

  • 23.215.35.131:443 (Akamai CDN)

  • 71.18.253.216:443 (AWS/ByteDance edge)

  • 74.125.200.94:443 (Google edge network)

This confirms DNS is not resolving normally.

Do you have any of these installed even in the past?

  • Cloudflare WARP

  • NextDNS app

  • AdGuard Desktop

  • Any VPN

  • “Web Shield” from antivirus

  • SimpleWall / Portmaster / GlassWire

  • Asus/Netgear router DNS filtering

After you run this command, what does it output?

Open CMD (admin):

netsh interface ipv4 show dnsservers

Reply
Page 2 / 2

Leave a reply

Author Name

Author Email

Title *

The advanced attachments is disabled for guests
Preview 0 Revisions Saved
Share:
Scroll to Top