I recently updated my Wordpress site to https but i didnt get the padlock next to the name in the browser and it says that it is insercure. I investigated using the following site:


and it appears my Logo and Favicon images are coming from a http address. Is there anyway to set these to https?



You are likely going to find they are hard coded http:// in your theme's header.php file.

If not, check in the customisation menu under site identity. You may have to remove and re-add your favicon.

| improve this answer | |
  • 1
    It is worth adding to this that you should check a site that has shifted to https in either the developer tools > console in Chrome or I am sure there is a site that will check your site to make sure all content is being called over https:// You may be surprised to find out how many http:// resources are hard coded and causing a warning. – Steve Jan 16 '17 at 7:15
  • It was not hardcoded. it has some variables there. Even after removing and adding again still gives http. – Srihari Karanth Nov 3 '18 at 6:07
  • A straightforward solution is the Really Simple SSL plugin. Works well – Steve Jul 11 at 14:35

I had the same problem. On the Settings->General page, there are two fields, "WordPress Address (URL)" and "Site Address (URL)", that had http in them instead of https. I update those fields and the problem went away.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.