A "mixed content" warning means your page loads over HTTPS but still pulls some files (images, scripts, CSS) over insecure http://. Fix it by updating those links to https://.
- Open your browser's developer console to see which resources are insecure.
- Edit your code or theme so all internal links use
https://yourdomain.comor protocol-relative paths. - On WordPress, install a plugin like Really Simple SSL or run a search-replace of
http://yourdomain.comtohttps://yourdomain.comin the database.
Make sure SSL is active and HTTPS is forced first. After changes, clear your site and browser cache, then reload in a private window. If a single stubborn asset remains, check hard-coded URLs in your theme or plugins.
