On this page, we would like to provide you with information on the topic of ‘mixed content’, explain where this message comes from and what you can do about it.
Mixed content - what is it?
If you use an SSL certificate to encrypt your website, you may, under certain circumstances, see a ‘Mixed Content’ warning in the browser address bar or browser console. This message indicates that the website’s content is only partially encrypted during transmission. This occurs when embedded resources (e.g. images, scripts, etc.) on the SSL-protected website are accessed via an unencrypted path (http:// instead of https://).
This mixed content triggers a warning in your browser, as the website is no longer fully encrypted and these resources could potentially intercept data.
How do I find and identify mixed content?
Firstly, you’ll see a warning message in your web browser’s address bar stating that mixed content has been detected. Here, you can click on the padlock icon (usually to the left of the URL) to view further information about the page. If there is an error, it will be listed in detail here.
If mixed content is present, you can quickly identify it via your website’s source code in the browser (e.g. right-click in the page area -> View Page Source). To do this, simply use the browser’s search function to look for the term ‘http://’ in the source code you have opened; you will then quickly see which elements are integrated via the insecure connection.
Mixed content - how do I remove it?
If, following the search described above, you have found content that is embedded via http://, adjust the embedding of these resources to use https://. This can be done either via the relevant scripts on your website or directly within the content management system.
If you have any questions or encounter any problems, we recommend consulting a web agency to resolve the issues. Our support team will also be happy to assist you, within the limits of our capabilities.