Free mixed content checker
If a page is on https:// but still loads some images, scripts or other files over insecure http://, browsers may show a warning or block those files. We'll check the page you enter for that mixed content.
What this checks
This is a passive, light-touch check. It only reads what a normal browser visit and public DNS can see. It isn't a security test, a penetration test or a guarantee.
Check a site
Checking your site… This usually takes under a minute.
What your result means
- Pass: Everything on this page loads securely.
- Worth a look: [N] images or other files load over insecure http://, so the padlock may show a warning.
- Needs fixing: [N] scripts, styles or frames load over insecure http://. Browsers often block these, which can break your page.
- How to fix: Change those file addresses from http:// to https://. If a file isn't available over https, host a copy on your own site.
FAQs
What is mixed content?
Secure page, insecure file. The padlock page loads something over plain http://.
Why are scripts treated more seriously than images?
Browsers often block insecure scripts, styles and frames outright, which can break the page. Insecure images more often trigger a warning.
Does fixing mixed content need a new certificate?
No. You already have https://. Update the file addresses (or host copies) so they use https:// too.
Do you check the whole site?
No. Only the page you enter.