Fix guide · Shopify
How to Fix Mixed Content Warnings in Shopify (2026)
Your Shopify store loads over HTTPS, but some resources (images, scripts, stylesheets) are still referenced with http:// URLs. Browsers block or warn about these "mixed content" requests, breaking functionality and showing security warnings. Since Shopify forces HTTPS on all stores, the fix is finding and updating the hard-coded HTTP references.
Why it matters
What this issue costs you
Mixed content triggers browser security warnings (the padlock disappears or shows a warning), which destroys customer trust on an e-commerce site. Browsers increasingly block mixed content entirely — meaning HTTP images won't load and HTTP scripts won't execute. Google also considers HTTPS a ranking signal, and mixed content undermines it.
Step-by-step
How to fix: Mixed content (HTTP on HTTPS)
Shopify
- 1
Find mixed content sources
Open your store in Chrome, press F12 (DevTools), and click the Console tab. Mixed content warnings appear as yellow or red messages showing the exact HTTP URLs causing issues. Note which files and URLs are listed. Common culprits: hard-coded image URLs in product descriptions, custom HTML sections, or third-party scripts.
- 2
Fix hard-coded URLs in theme code
Go to Admin > Online Store > Themes > Actions > Edit code. Search all files for "http://" using the search box. Replace http:// with https:// in any asset references. For Shopify-hosted assets, use protocol-relative Liquid filters instead of hard-coded URLs:
Theme files<!-- Bad: hard-coded HTTP --> <img src="http://cdn.shopify.com/s/files/1/image.jpg"> <!-- Good: use Liquid image_url filter --> <img src="{{ image | image_url: width: 800 }}"> <!-- Good: protocol-relative --> <img src="//cdn.shopify.com/s/files/1/image.jpg"> - 3
Fix URLs in product/page content
Mixed content often hides in product descriptions and page content where images were pasted with http:// URLs. Go to Admin > Products (or Pages), edit the item, click the HTML view (<> button in the rich text editor), and search for "http://". Replace with "https://" or re-upload the image through Shopify's media picker.
- 4
Fix third-party scripts
If a third-party app or custom script is loaded over HTTP, contact the provider for an HTTPS version. Most services support HTTPS — the embed code is just outdated. For scripts you control, change http:// to https:// in the <script src="..."> tag. If the service doesn't support HTTPS, remove it — an insecure script on a checkout page is a liability.
Verify the fix
Run the checker to confirm the issue is resolved
After applying the steps above, paste your URL below. Our checker will re-run every applicable check and show whether mixed content (http on https) still shows as a failing check.
FAQ
Common questions about mixed content (http on https)
Does Shopify serve everything over HTTPS by default?
Yes — Shopify forces HTTPS on all stores and provides a free SSL certificate. Mixed content only occurs when you (or an app) hard-code http:// URLs in theme files, product descriptions, or custom HTML. Shopify's own assets are always HTTPS.
Will mixed content affect my Shopify store's SEO?
Yes. Google uses HTTPS as a ranking signal, and mixed content means your page isn't fully secure. More importantly, browsers may block the insecure resources (images not loading, scripts not executing), which degrades user experience — a stronger negative signal.
I fixed the URLs but still see warnings. Why?
Likely browser cache or CDN cache. Hard-refresh (Ctrl+Shift+R), clear your browser cache, and purge any CDN cache (Cloudflare: Caching > Purge Everything). Also check if a Shopify app is injecting HTTP resources — disable apps one by one to isolate.
While you're here
Related fix guides for Shopify
Need a full audit?
This checker spots individual issues instantly. deepseoanalysis.com crawls your whole site and tracks changes weekly, from $24/mo.
See all WordPress fix guides, or run a free check now.