Google is now sending mass messages via the Google Search Console about making sure your login box is served over HTTPS. Many sites have logins on HTTP, non secure pages, and with Chrome 56. The warning says “Nonsecure Collection of Passwords will trigger warnings in Chrome 56 for domain.com.”
The warning goes on to read:
Here is a screen shot:
The solutions are:
(A) Switch your site to HTTPS completely
or
(B) Link to an HTTPS secure page that lets your users login there, as opposed to logging in on a page that is HTTP, not secure.
Forum discussion at Twitter.