How to fix mixed content warnings

A mixed content warning means your page loads over https but still pulls some items (images, scripts, stylesheets) over insecure http. The padlock then shows a warning.

Find the culprits

Most browsers list the insecure items in their developer console (look for mixed content messages). They're usually hard-coded http:// links to images or scripts.

Fix it

  • WordPress: the Really Simple SSL plugin fixes most mixed content automatically. Also set both URLs to https under Settings → General.
  • Hard-coded links: update http:// to https:// (or use protocol-relative //) in your pages, theme or database.
  • Re-check after each change.

Still seeing warnings?

A search-and-replace across your database often clears stubborn cases. Open a ticket and we can help track them down.

Was this answer helpful?

 Print this Article

Also Read

How to enable two-factor authentication on your account

Two-factor authentication (2FA) adds a second step to login — a code from your phone — so even if...

What is an SSL certificate and why you need one

An SSL certificate encrypts the connection between your website and your visitors, shown by...

How to renew your SSL certificate

SSL certificates have an expiry date. The good news is that BPHOST's free AutoSSL renews itself —...

How to force your site to use HTTPS

Once your SSL certificate is active, redirect visitors from http to https so everyone gets the...

How to fix common SSL errors

SSL errors look alarming but are usually quick to resolve. Here are the common ones. Not secure...