How to Fix Mixed Content Errors on an HTTPS Website

⚠️Free Mixed Content Checker
Find http:// files that break the padlock on https pages.Open tool →

Find the insecure files

Run your page through the Mixed Content Checker. It lists every http:// script, stylesheet, image, frame and form, and flags the ones browsers block outright.

Fix on WordPress

Set both addresses in Settings > General to https://. Then run a database search-and-replace from http://yourdomain.com to https://yourdomain.com (a plugin like Better Search Replace does this). Check theme and page-builder settings for hard-coded http:// links.

Fix anywhere else

Change each listed URL to https:// or to a relative path. If a third-party file isn't available over HTTPS, replace it or host a copy yourself.

Prevent it

Add the header Content-Security-Policy: upgrade-insecure-requests to automatically upgrade stray http:// requests.

Frequently asked questions

Is mixed content dangerous?

Insecure scripts and forms can be tampered with on public Wi-Fi.

Why are some files blocked?

Browsers block insecure scripts, styles, frames and forms on HTTPS pages.

Does it affect SEO?

Indirectly – broken pages and missing padlocks hurt trust.