Fixing Mixed Content Errors
After installing SSL, your site may show a "Not Secure" warning due to mixed content – some resources loading over HTTP instead of HTTPS.
What Is Mixed Content?
Mixed content occurs when your HTTPS page loads resources (images, scripts, stylesheets) over HTTP. Browsers block or warn about these insecure requests.
How to Find Mixed Content
- Open your site in Chrome
- Press F12 to open Developer Tools
- Go to the Console tab
- Look for "Mixed Content" warnings
How to Fix (WordPress)
Method 1: Search & Replace Plugin
- Install Better Search Replace plugin
- Search for
http://yourdomain.com - Replace with
https://yourdomain.com - Run on all tables
Method 2: Really Simple SSL Plugin
Install and activate the Really Simple SSL plugin. It automatically fixes most mixed content issues.
Method 3: .htaccess Rule
Header always set Content-Security-Policy "upgrade-insecure-requests;"
Hardcoded URLs
Check your theme files for hardcoded http:// URLs and change them to https:// or use protocol-relative //.
