Request a tool
Find a tool
WEBSITE SECURITY TOOLS · FREE ONLINE TOOL

Mixed Content Checker

Find insecure http:// resources loading on your HTTPS pagesYou forced HTTPS everywhere, then one image or script loads over plain HTTP and quietly undermines all of it. This checker scans any HTTPS page and lists every subresource still loading insecurely.

✓ Free to use✓ No sign-up✓ Ready in your browser
// MIXED CONTENT CHECKER · GET STARTED

Use Mixed Content Checker

Find insecure http:// resources loading on your HTTPS pages

// MIXED CONTENT CHECKER · HOW IT WORKS

How to use the Mixed Content Checker

01

Enter URL

Enter the HTTPS page URL you want to scan (e.g. https://example.com).

02

Scan the page

Click "Check Mixed Content" and wait while the page HTML is scanned.

03

Fix the findings

Review the active and passive findings and fix the listed URLs.

// MIXED CONTENT CHECKER · ABOUT THIS TOOL

About the Mixed Content Checker

Mixed content kills the padlock: your site loads over HTTPS but one image or script came over plain HTTP. This checker fetches your page and finds every http:// subresource across images, scripts, styles, iframes and media.

Findings are split the way browsers treat them: active content that gets blocked, passive content that downgrades the padlock. Each item shows the exact URL and tag.

Where it helps most

The moments mixed content sneaks in.

After HTTPS migration

Catch years of hardcoded http:// URLs, especially on WordPress sites with old absolute image links.

New third-party widgets

Re-scan after adding widgets or embeds that may pull resources over plain HTTP.

Pre-launch QA

Confirm the padlock is real, not just a padlock with exceptions, before visitors arrive.

WordPress cleanups

Find years of hardcoded http:// image links buried in old WordPress posts and pages.

Reading the report

Not all mixed content is equal.

Active content gets blocked

Scripts and iframes are blocked outright by browsers, silently breaking page functionality.

Passive content warns

Images and media load with a warning, costing you the padlock icon and visitor trust.

Fix, then re-scan

Update references to https:// and re-run the scan, since one leftover reference keeps the warning alive.

Mixed Content Checker: built for trust

Each finding includes the exact offending URL, so fixing it is a matter of updating the reference. No signup needed.

// MIXED CONTENT CHECKER · COMMON QUESTIONS

Mixed Content Checker FAQs

An HTTPS page that loads some of its resources, like images or scripts, over plain HTTP. The page is only as secure as its weakest resource, so browsers treat mixed content as a genuine security problem rather than a cosmetic one.
// MIXED CONTENT CHECKER · KEEP EXPLORING

Related tools

View all tools →
Security Headers Checker

Some of the strongest security upgrades on the web cost nothing and take minutes: response headers that block entire attack classes. This checker grades any site A to F on the six headers that matter most.

Open tool →Content Security Policy Checker

Cross-site scripting is still one of the most exploited web vulnerabilities, and a Content Security Policy is the closest thing to a cure. Enter a URL and get your live policy parsed into a readable, directive-by-directive view.

Open tool →SSL Certificate Checker

An expired certificate turns a working website into a full-page browser warning overnight, and it still happens to major sites every year. Enter any domain to see the dates, issuer, and covered domains in seconds.

Open tool →
// MIXED CONTENT CHECKER · FROM THE BLOG

Learn more about Mixed Content Checker

View all articles →
DNS Lookup: Free Online DNS Record Checker for Any Domain
tools-guide

DNS Lookup: Free Online DNS Record Checker for Any Domain

Free online DNS lookup tool. Check A, AAAA, MX, TXT, CNAME, NS and SOA records for any domain instantly. Fast, private, accurate, no sign-up required.

Read article →
HTTP Status Checker: Instantly Diagnose Any URL Response
tools-guide

HTTP Status Checker: Instantly Diagnose Any URL Response

Free HTTP status checker. Check any URL's status code, trace redirect chains hop by hop, and fix 404, 301 and 500 errors before they silently hurt your SEO.

Read article →