Mixed Content Checker

A mixed content checker is a free online tool that fetches your HTTPS website and analyzes all resource URLs to find any that load over insecure HTTP. It identifies both active mixed content (scripts, iframes) and passive mixed content (images, audio), flagging each with the specific URL and fix instructions.

Enter your HTTPS website URL in the mixed content checker above. We'll fetch your page, analyze all resource URLs — scripts, images, stylesheets, iframes, fonts — and show you exactly which ones load over HTTP and how to fix them.

Mixed content occurs when an HTTPS page loads resources (scripts, images, stylesheets) over insecure HTTP. This weakens your HTTPS connection — the page may show a security warning, and active mixed content (scripts) is blocked by modern browsers.

Active mixed content (scripts, iframes, XMLHttpRequests) can modify the page and is blocked by browsers — this breaks functionality. Passive mixed content (images, audio, video) is displayed with a security warning but not blocked, though it still weakens your HTTPS protection.

Update all resource URLs from http:// to https://. For external resources you don't control, use protocol-relative URLs (//). You can also add Content-Security-Policy: upgrade-insecure-requests to automatically upgrade HTTP requests to HTTPS.

Yes. Google uses HTTPS as a ranking signal, and mixed content warnings signal a degraded security posture. Browsers may block active mixed content, causing broken functionality that hurts Core Web Vitals and user experience metrics.

Yes, our mixed content checker is completely free. It's part of SecScanner's free toolkit that runs 60+ security checks covering SSL, HTTP headers, DNS, cookies, and more.