Mixed content warning
Why an HTTPS page shows a warning or broken images and how to fix it.
Mixed content occurs when a page loaded over https:// fetches images, scripts or styles over http://. The browser blocks them or removes the padlock from the address bar, even though the certificate itself works correctly.
Finding the problem#
- Open the page in your browser and press F12 for developer tools.
- Open the Console tab.
- Look for "Mixed Content" messages that name the exact
http://URL.
Fixing it#
- Hand-written pages: in HTML replace
http://yourdomain.com/...withhttps://yourdomain.com/...or use relative paths (/images/logo.png). - WordPress: in Settings → General the addresses must start with
https://. Replace old addresses in the content with the replace tool in WP Toolkit or a database replace plugin. You can view the database in phpMyAdmin. - External scripts: check whether the external source supports
https://and change the address. - Cache: after changes clear the plugin and browser cache (Ctrl + F5).
Redirecting all visitors to HTTPS is described in Forcing HTTPS.
Was this article helpful?
Thanks for your feedback! Need help? Open a ticket.
Related articles
SSL certificate and AutoSSLHow to check your SSL certificate in cPanel and run AutoSSL if it was not issued.Forcing HTTPSHow to automatically redirect all visitors from http:// to https:// using cPanel or the .htaccess file.Browser SSL error"Your connection is not private" and similar messages: causes, certificate check and fixes.Two-factor authentication (2FA)Enable 2FA in cPanel with an authenticator app and protect your login even if the password leaks.