Free tool · Check

Why No Padlock: mixed content checker

A valid SSL certificate is only half the job. If one image, script or font still loads over plain http, browsers hide the padlock. Paste your page URL and we list every insecure resource so you can fix it in minutes.

Scan a page

We fetch this one page over https and list every http:// image, script, stylesheet, font, iframe and media file.

Fix it fast

  • WordPress

    Settings, General: set both URLs to https. Then replace http://yourdomain with https://yourdomain in the database (Better Search Replace plugin), or install Really Simple SSL.

  • Custom HTML

    Change src and href values from http:// to https:// or use protocol-relative paths like /images/logo.png.

  • Third party scripts

    Chat widgets, ad tags and old CDN links sometimes only exist on http. Replace them with an https version or remove them.

  • One line safety net

    Add <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests"> in the head to auto-upgrade every http request on modern browsers.

FAQ

About this tool

Short answers. More in the guides.

Read the guides
What is mixed content?
Mixed content means an https page loads some files (images, CSS, JavaScript, fonts, iframes) over insecure http. Browsers then show a warning or block the file.
How do I fix mixed content on WordPress?
Update the Site URL and Home URL in Settings to https, then run a search and replace from http://yourdomain to https://yourdomain in the database. Plugins like Really Simple SSL can do this automatically.
Does this tool change my website?
No. It only reads the public page and reports what it finds. Nothing is saved or modified.

Need a certificate to go with this tool?

Every SSL with a PKR price, the requirements listed, and a quotation in one click.

Bank transferJazzCashEasyPaisaDebit or credit card
WhatsApp, reply in minutes