Mixed content happens when an HTTPS page loads some resources over insecure HTTP. The SSL certificate can be valid, but the browser may still show warnings or block scripts, stylesheets, fonts, images, or embedded content.
Check the Browser Warning
Open the affected page in a browser and look at the padlock icon. If the browser says the page is not fully secure, open developer tools and check the Console tab.
Mixed content warnings usually show the insecure URL. Copy those URLs so you can find where they are coming from.
Check the Page Source
View the page source and search for http://. You are looking for insecure assets on your own domain or third-party domains.
Common examples include:
- Images inserted before SSL was enabled.
- Old theme CSS or JavaScript URLs.
- Hard-coded background images.
- Embedded videos, maps, or widgets.
- Old WordPress site URL settings.
Check WordPress URLs
In WordPress, go to Settings → General and check that both the WordPress Address and Site Address use https://.
If the site was migrated from HTTP, old URLs may still be stored in the database. Use a careful search-and-replace tool and take a database backup first.
Check CSS Files
Some mixed content is hidden inside CSS files, especially background images or font imports. Open the CSS URL and search for http://.
Check CDN and Cache
If you fixed the URLs but warnings remain, clear WordPress cache, CDN cache, and browser cache. The browser may still be loading an old cached stylesheet or page.
Check Force HTTPS in Enhance
In Enhance, open the website and go to Security → SSL certificates. Confirm that the certificate is active and Force HTTPS is enabled for the hostname.
Force HTTPS does not fix every hard-coded asset URL, but it helps visitors and search engines use the secure page version consistently.
Do Not Ignore Blocked Scripts
Browsers often block active mixed content such as scripts and iframes. That can break menus, forms, checkout, tracking, or embedded tools. Fix those URLs rather than accepting the warning.
Related TekLan Posts
Read How to Check SSL Certificate Status in Enhance, SSL Certificates in Enhance, and How to Check if a Website Is Using Cache.