I recently updated my Wordpress site to https but i didnt get the padlock next to the name in the browser and it says that it is insercure. I investigated using the following site:


and it appears my Logo and Favicon images are coming from a http address. Is there anyway to set these to https?



You are likely going to find they are hard coded http:// in your theme's header.php file.

If not, check in the customisation menu under site identity. You may have to remove and re-add your favicon.

  • 1
    It is worth adding to this that you should check a site that has shifted to https in either the developer tools > console in Chrome or I am sure there is a site that will check your site to make sure all content is being called over https:// You may be surprised to find out how many http:// resources are hard coded and causing a warning.
    – Steve
    Jan 16 '17 at 7:15
  • It was not hardcoded. it has some variables there. Even after removing and adding again still gives http. Nov 3 '18 at 6:07
  • A straightforward solution is the Really Simple SSL plugin. Works well
    – Steve
    Jul 11 '20 at 14:35

I had the same problem. On the Settings->General page, there are two fields, "WordPress Address (URL)" and "Site Address (URL)", that had http in them instead of https. I update those fields and the problem went away.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.