What Mixed content means
Mixed content can break the padlock, trigger browser warnings or block scripts entirely. It often appears after moving to HTTPS or from old hard-coded links. Fixing it is usually a quick cleanup.
Why it matters for your website
Mixed content weakens the security of an HTTPS page and can cause browsers to block scripts, images or styles. That can break forms, layouts or tracking, and it may remove the secure indicator visitors look for. It often shows up after moving a site to HTTPS with old links still in the content.
Example
A clinic switches its site to HTTPS, but its appointment widget still loads from an http:// address. The browser blocks the script and the booking form goes blank.
Tips
- Use your browser's developer console to find mixed content warnings on key pages.
- Search your database and theme files for old http:// links and update them.
- Make sure third-party embeds and scripts support HTTPS before adding them.
Common mistakes
- Hard-coding http:// links to images and files in page content or templates.
- Ignoring warnings on less visited pages, like old blog posts or landing pages.
Questions about Mixed content
What is Mixed content?
When a secure HTTPS page loads some images, scripts or files over insecure HTTP.
How do I fix mixed content in WordPress?
Update your site URL settings to HTTPS, then run a careful search and replace on the database for old http:// links. Back up first, and check theme and plugin files too.
Why doesn't my site show as secure even with an SSL certificate?
A page can have a valid certificate and still load some files over HTTP. Those insecure files can cause browsers to show warnings or block content.
