Mixed Content Scanner
Detects resources loaded over HTTP on an HTTPS page that travel unencrypted and break the padlock.
What it checks
This scanner detects resources like images, scripts or styles that your HTTPS page loads over unencrypted HTTP. That mix is known as mixed content. The scanner reviews the page's references to find which ones do not use HTTPS.
Why it matters
Mixed content travels unencrypted, so it can be intercepted or tampered with even if the rest of the page is secure. On top of that, the browser may block those resources or drop the padlock, making the site look insecure. In the worst case, a script loaded over HTTP compromises the whole page.
How to fix it
Change all resource references so they start with https instead of http. Pay special attention to links to external libraries, images and legacy fonts. If an external resource does not offer HTTPS, find an alternative or host it yourself securely.
Check it on your site
Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.
Scan my site free