Even after installing SSL, your site may show “Not Secure”.
What is Mixed Content?
Some resources (images/scripts) still load via HTTP instead of HTTPS.
Fix Steps
Step 1: Force HTTPS
Add to .htaccess:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
Step 2: Update URLs in Database
Use plugin or run SQL replace:
http://yourdomain.com → https://yourdomain.com
Step 3: Clear Cache
- Browser
- CDN
- Website cache
Pro Tip
Use browser DevTools --> Console to identify insecure resources.