How to Check for Unsecured Content on Secured Sites

A variety of resources are available to check for unsecured (insecure) content on a site with SSL installed.

WhyNoPadlock provides a good summary for issues on specific pages.

The Jitbit SSL check crawls the site and identifies issues on multiple pages (200 page max).

Resolving Unsecured Content on Secured Pages by Volusion provides some good information.

The WordPress plugin SSL Insecure Content Fixer has good reviews, although I’ve not had luck with it myself.

Browsers also offer troubleshooting. In Chrome, right click to ‘inspect element’, and open the console tab.

In Firefox, go to Tools > Web Developer > Web Console (or CTRL+SHIFT+K), select the security tab, select errors and warnings in the dropdown, and reload the page.

Note that links in the WordPress admin bar can sometimes cause security errors that will not appear for regular users; these will usually show up in one of the tests above (but not in all; Chrome seemed particularly sensitive to this error).

Please add any tricks of your own – thanks!

Image credit: https://commons.wikimedia.org/wiki/File:Lock.svg. This work (the padlock screen) has been released into the public domain by its author, The Tango! Desktop Project (Contributors;FAQ), who  grants anyone the right to use this work for any purpose, without any conditions, unless such conditions are required by law.