How to fix mixed content warnings
A mixed content warning means your page loads over https but still pulls some items (images, scripts, stylesheets) over insecure http. The padlock then shows a warning.
Find the culprits
Most browsers list the insecure items in their developer console (look for mixed content messages). They're usually hard-coded http:// links to images or scripts.
Fix it
- WordPress: the Really Simple SSL plugin fixes most mixed content automatically. Also set both URLs to https under Settings → General.
- Hard-coded links: update http:// to https:// (or use protocol-relative //) in your pages, theme or database.
- Re-check after each change.
Still seeing warnings?
A search-and-replace across your database often clears stubborn cases. Open a ticket and we can help track them down.
