What Is Mixed Content?
Mixed content happens when a website uses both secure HTTPS connections and insecure HTTP connections on the same page.
HTTPS protects information between the visitor and the website by encrypting the connection.
However, if a secure page loads files using HTTP, the browser may consider part of the page unsafe.
Example:
A secure page:
https://yourwebsite.com/about-us
loads an image:
http://yourwebsite.com/uploads/logo.png
The page is HTTPS, but the image is being loaded through an insecure connection.
This is called mixed content.
Why Does Mixed Content Matter?
Mixed content can cause problems because visitors may not be receiving a completely secure browsing experience.
Potential issues include:
- Browser security warnings
- Missing images or scripts
- Broken website features
- Reduced visitor trust
- Search engine quality concerns
Modern browsers actively block some insecure resources to protect users.
What Types of Files Can Cause Mixed Content?
Common examples include:
- Images
- JavaScript files
- CSS files
- Fonts
- Videos
- Embedded content
- External services
For example:
❌ Incorrect:
http://example.com/image.jpg✅ Correct:
https://example.com/image.jpgWhy Does This Happen?
Mixed content is usually caused by:
- Moving a website from HTTP to HTTPS
- Old links saved in the database
- Outdated plugins or themes
- Manually added HTML code
- External services still using HTTP URLs
A website may have been converted to HTTPS successfully, but old references can remain.
How To Fix Mixed Content
1. Check WordPress Address Settings
Go to:
WordPress Dashboard → Settings → General
Confirm that both are using HTTPS:
WordPress Address (URL)
https://yourwebsite.com
Site Address (URL)
https://yourwebsite.com2. Update Old HTTP Links
Search your website content for “http:” and change the links to “https:”
Common places to check:
- Pages
- Posts
- Widgets
- Theme settings
- Plugin settings
3. Update Media Links
Images uploaded before HTTPS migration may still contain HTTP URLs.
Review older content and update any insecure media references.
4. Check Plugins and Themes
Some plugins or themes may load resources incorrectly.
Make sure:
- Plugins are updated
- Themes are updated
- Third-party scripts use HTTPS
5. Check External Resources
If your website loads content from another website, ensure that service supports HTTPS.
Examples:
- Fonts
- Analytics scripts
- Embedded videos
- External widgets
How Pixeljuice Checks Mixed Content
Pixeljuice checks your homepage HTML for resources loaded using HTTP while your website is running on HTTPS.
The scan looks for insecure:
- Images
- Links
- Scripts
- Other referenced resources
If HTTP resources are detected, they should be reviewed and updated.
Summary
A website should ideally load all content through HTTPS.
Fixing mixed content helps maintain:
✅ Visitor trust
✅ Browser security indicators
✅ Website reliability
✅ A fully secure HTTPS experience
A valid SSL certificate protects your website, but all resources on the page must also use secure HTTPS links.