NB: after you open your browser’s console, refresh your page so that it tries to load the insecure content again and logs warnings to the error console.
Why No Padlock? has a really good online test tool for diagnosing HTTPS problems.
I get “insecure content” warnings from some of my content
You are probably loading content [such as images] with a URL that starts with “”. Take that bit away, but leave the slashes, e.g. //www.example.com/image.png; your browser will load the content, using HTTPS when your page uses it. Better still, replace “” with “” so that it always uses https to load images, e.g. //www.example.com/image.png.
If your page can be used outside a web browser, e.g. in emails or other non-web documents, then you should always use a protocol and it should probably be “” [since you have an SSL certificate]. See Cleaning up content for more details.
My website is behind a load balancer or reverse proxy
If your website is behind a load balancer or other reverse proxy, and WordPress doesn’t know when HTTPS is being used, you will need to select the appropriate HTTPS detection settings. See my blog post, WordPress is_ssl[] doesn’t work behind some load balancers, for some details.
I get warnings about basic WordPress scripts like jquery.js
You are probably behind a reverse proxy — see the FAQ above about load balancers / reverse proxies, and run the SSL Tests from the WordPress admin Tools menu.
I changed the HTTPS Detection settings and now I can’t login
You probably have a conflict with another plugin that is also trying to fix HTTPS detection. Add this line to your wp-config.php file, above the lines about ABSPATH. You can then change this plugin back to default settings before proceeding.
define['SSLFIX_PLUGIN_NO_HTTPS_DETECT', true];
I still get “insecure content” warnings on my secure page
Post about it to the support forum, and be sure to include a link to the page. Posts without working links will probably be ignored.
You listed my plugin, but I’ve fixed it
Great! Tell me which plugin is yours and how to check for your new version, and I’ll drop the “fix” from my next release.
Thanks so much for this great plugin that saves us a lot of time and efforts! Cheers!
Thumbs up for minimalism, simplicity, following best practices. It is lighweight plugin that simply works. It is not only plugin but actually a role model for other wp developers, how a wordpress plugin should looks like. No excessive colorful menu icons screaming “watch another plugin” but simple sub item under settings. No ads, nicely processed solution to a problem. It is not that common see such properly developed plugin. All developers should be adding value to WP by adding functionality while keeping is simple like this guy[s], clean, easy to use. Not like most of developers, who are changing WordPress into one huge complicated aggregator of ads and confusing sections or buttons. Great job.
Plugin is simple lightweight and it just works better than other available plugins that recommends unnecessary functions.
After since I upgraded my website to cloudflare ssl, i use tons of other plugins even tried to manually change http links to https , and in process i wasted whole day not to mention, website broke many times during this processEventually I found out this plugin when searching for “mixed content error fix in wordpress” and plugin was so intelligent it give me option for cloudflare ssl fix and now site is loading perfectly. Just one radiobox option provided here saved 17+hours work! Its like developers are heaven sent! Great Job guys welldone!!!
I was trying to solve mixed content from last 3 days, And when I used this plugin in few clicks problem solved. Loved it.
Awesome plug-in. I had mixed content from a theme. Rather than editing the theme and disabling auto-updates, I installed this plug-in and it just worked. I’m very grateful such a plug-in exists.
Read all 218 reviews
“SSL Insecure Content Fixer” is open source software. The following people have contributed to this plugin.