Mixed Content 🆕
Keep every resource on HTTPS
Written By David
Last updated 10 days ago
"Mixed content" sounds technical, but it's simple: it means a secure page (one that loads over https, with the padlock) is pulling in a few pieces, like an image, font, or script, over the old, insecure http. Because part of the page isn't secure, browsers may block those pieces or warn visitors that the page isn't fully safe.
Where to find it
Open your site in Cromojo, go to Domain Monitoring, and click the Mixed Content tab.
What you’ll see
One of two results: "We did not find mixed content" (great, nothing to do), or a list of the insecure files that are loading on your secure pages.
Why this matters
When a secure page loads insecure files, the browser can't promise the whole page is safe. Visitors may see a broken padlock or a "Not fully secure" message, and some browsers quietly block the insecure files, which can make images or features vanish.
How to fix it
Look at each flagged file, Cromojo shows the resource that's loading over http.
Update its link from http:// to https:// (most modern hosts and CDNs already serve the same file securely over https).
If the file isn’t available over https at all, host it yourself or swap it for an https version.
Re-check the Mixed Content tab, once everything loads over https, the warning clears and your pages are fully secure.