Wordpress SSL Site insecure. How do i change logo and Favicon to https?

Question

I recently updated my Wordpress site to https but i didnt get the padlock next to the name in the browser and it says that it is insercure. I investigated using the following site:

https://www.whynopadlock.com/check.php

and it appears my Logo and Favicon images are coming from a http address. Is there anyway to set these to https?

Thanks

Solution 1

You are likely going to find they are hard coded http:// in your theme's header.php file.

If not, check in the customisation menu under site identity. You may have to remove and re-add your favicon.

Solution 2

I had the same problem. On the Settings->General page, there are two fields, "WordPress Address (URL)" and "Site Address (URL)", that had http in them instead of https. I update those fields and the problem went away.

Comments

[Steve]

It is worth adding to this that you should check a site that has shifted to https in either the developer tools > console in Chrome or I am sure there is a site that will check your site to make sure all content is being called over https:// You may be surprised to find out how many http:// resources are hard coded and causing a warning.

[Srihari Karanth]

It was not hardcoded. it has some variables there. Even after removing and adding again still gives http.

[Steve]

A straightforward solution is the Really Simple SSL plugin. Works well