Content from other sites must also be secure.
WHAT THIS AFFECTS
Embedded videos Maps Social media widgets Fonts and icon libraries Analytics and advertising scripts Chat widgets Payment forms
THE RULE
Every resource loaded into a secure page must itself be loaded over https, or the browser blocks it and the padlock breaks.
MOST SERVICES ARE FINE
All major providers serve over https. Embeds copied from their current interfaces work without change.
WHERE PROBLEMS ARISE
Old embed code copied years ago with an http URL Small or old services that do not support https Self-hosted resources referenced with an absolute http URL
FIXING IT
Update the embed code to the current version from the provider Change http:// to https:// in the URL and test If the service genuinely does not support https, host the resource yourself or find an alternative
FINDING THEM
The browser console names each blocked resource with its URL.
A PRACTICAL POINT
Every third-party embed is also a performance and privacy cost. Removing ones you do not need helps more than fixing them.
