Security & SEO

    How to use the free mixed content checker

    Scan any HTTPS page for insecure http:// resources (images, scripts, iframes) that break the padlock.

    Updated 2026-07-10
    1 min read
    mixed-content
    https
    security

    Quick answer#

    Enter your HTTPS page URL at /tools/mixed-content-checker. It renders the page, catches every http:// request, and shows the exact file and line to fix.

    What it checks#

  1. Insecure images, scripts, iframes, and stylesheets
  2. Passive vs active mixed content (severity)
  3. Sub-resources loaded by third-party scripts
  4. Broken padlock indicators in modern browsers
  5. URL-level fix suggestions (usually swap to //)
  6. Where to find it in Lemwatch#

    Public tool: /tools/mixed-content-checker. Use it after a WordPress migration or when moving to HTTPS.

    How to use it#

  7. Paste the HTTPS URL of the page.
  8. Click Scan.
  9. Review flagged resources grouped by severity.
  10. Update each URL to https:// (or protocol-relative //).
  11. Re-scan to confirm zero mixed content remains.
  12. FAQ#

    Why does the tool show more resources than my dev tools?#

    It follows lazy-loaded assets and iframe-embedded scripts that Chrome hides by default.

    Will fixing mixed content improve SEO?#

    Yes — Chrome downgrades mixed HTTPS pages, and Search Console reports them as security issues.

  13. Free SSL checker
  14. Free security header checker
  15. Was this article helpful?