Flash Sale:75% Off Hosting + Free DomainEnds in13h47m14sView Plans
Hostvento logoHostvento
Get Started

Fix the "Secure and Non-Secure Items" Warning

This guide shows you how to remove the browser warning that says your page has both secure and non-secure items. It is also called a mixed content warning.

SSL and Security2 min read14 steps

What is mixed content?

HTTPS is the safe, locked version of a web address. An SSL certificate is a digital badge that turns the lock on. Your page may load over HTTPS, but some parts, like pictures or scripts, may still load over plain HTTP. HTTP is the old, unlocked version. When both are mixed on one page, the browser shows a warning or hides the padlock.

Think of a locked car carrying a window left open. The car is only as safe as its weakest part.

Step 1: Find the unsafe items

  1. Open your website in Google Chrome.
  2. Right-click the page and choose Inspect.
  3. Click the Console tab.
  4. Reload the page.
  5. Look for yellow or red messages that say "Mixed Content". Each one shows the exact address that is still using http://.

Step 2: Change the addresses to HTTPS

For each unsafe item, change http:// to https:// in the link. For example:

http://example.com/images/logo.png
https://example.com/images/logo.png

The second line is the safe one. Use it everywhere.

Step 3: Fix a WordPress site

WordPress is a popular tool for building websites. Old links are often saved inside its database.

  1. Take a full backup of your site first. Changes to the database can break a site.
  2. Log in to your WordPress dashboard.
  3. Go to Settings, then General.
  4. Change both WordPress Address (URL) and Site Address (URL) to start with https://.
  5. Click Save Changes.
  6. Install a plugin such as "Really Simple SSL" or "Better Search Replace". Use it to replace http://yourdomain.com with https://yourdomain.com in the database.

Some pictures or scripts may come from other websites. Check that those sites support HTTPS. If they do, change the link to https://. If they do not, download the file and upload it to your own hosting, or remove it.

Step 5: Test again

  1. Clear your browser cache. The cache is a small store of saved page parts.
  2. Reload your page.
  3. Check that the padlock shows and the Console has no more mixed content messages.
Tip: Check that your SSL certificate is installed and valid first. If you are not sure, ask Hostvento support through a support ticket.

Quick recap

  • The warning appears when an HTTPS page loads some items over HTTP.
  • Use the browser Console to find the unsafe items.
  • Change every http:// link to https://.
  • On WordPress, update the site addresses and replace old links in the database after a backup.
  • Clear the cache and test again.