Free HTTPS & Mixed Content Checker

What this HTTPS and mixed content checker checks

This free HTTPS checker confirms two things: that the page you enter is served securely over HTTPS, and that it contains no mixed content, where the page itself loads over HTTPS but pulls in images, scripts, or stylesheets over insecure HTTP. Mixed content triggers the "not fully secure" warning in browsers and can silently break resources.

To check the certificate itself, including its expiry date and issuer, use the SSL certificate checker.

Why HTTPS and mixed content matter

HTTPS has been a lightweight ranking signal for years, and browsers now mark plain HTTP pages as "Not Secure", which erodes trust and conversions. Any modern feature, from service workers to autofill, also increasingly requires a secure origin.

Mixed content is the sneaky one: your page loads over HTTPS, so the padlock looks fine, but a single hard-coded http:// image or script downgrades the security of the whole page and browsers may block the insecure resource entirely, breaking your layout or functionality.

How to fix HTTPS and mixed content issues

If the page is not on HTTPS at all, install a TLS certificate (most hosts and CDNs offer free automated certificates) and redirect all HTTP traffic to HTTPS with a 301.

• Find hard-coded http:// URLs in your templates, content, and database, and switch them to https:// or protocol-relative URLs.
• Add a redirect from http:// to https:// at the server or CDN so no one lands on the insecure version.
• Consider an HSTS header to tell browsers to always use HTTPS, which you can verify with the security headers checker.

Honest limits

This tool checks the single page you enter for HTTPS and for mixed content references in the HTML. It does not inspect resources loaded dynamically by JavaScript after render. For a site-wide security and SEO sweep with a PDF report, run a full free audit.