Fixing WordPress mixed content issues
When you visit a site using https:// your browser will expect all the content to be sent securely, over SSL - which is what gives you https (HTTP Secure) and the secure (sometimes green) padlock in your browser address bar.
However, sometimes content from the site or page will be sent over http:// - and this will cause a mixed content warning. How you see this varies by browser, some show a warning, others an orange padlock (instead of green or black) and others just don't show the content.
This is something you'll want to resolve to ensure all visitors have a secure visit and optimal experience. There are a number of options:
Use this handy website to scan your site and advise you exactly which content is being sent insecurely - you can then edit those posts or pages to update the links to https:// - Why No Padlock (external link opens in a new window).
If there are simply too many insecure links to enable you to change them all quickly you could use a plug-in like Really Simple SSL (external link opens in a new window) to ensure all content is served over https://
Use a WordPress plug-in like Better Search and Replace (external link opens in a new window) to change all occurrences of http://<your-website-domain> with https://<your-website-domain>
Now that you have fixed the mixed content errors, you may want to force visitors to use a secure connection.
*
*
However, sometimes content from the site or page will be sent over http:// - and this will cause a mixed content warning. How you see this varies by browser, some show a warning, others an orange padlock (instead of green or black) and others just don't show the content.
This is something you'll want to resolve to ensure all visitors have a secure visit and optimal experience. There are a number of options:
Use this handy website to scan your site and advise you exactly which content is being sent insecurely - you can then edit those posts or pages to update the links to https:// - Why No Padlock (external link opens in a new window).
If there are simply too many insecure links to enable you to change them all quickly you could use a plug-in like Really Simple SSL (external link opens in a new window) to ensure all content is served over https://
Use a WordPress plug-in like Better Search and Replace (external link opens in a new window) to change all occurrences of http://<your-website-domain> with https://<your-website-domain>
Now that you have fixed the mixed content errors, you may want to force visitors to use a secure connection.
*
*
Updated on: 24/01/2024
Thank you!