Wix manages SSL certificates automatically for all sites. You cannot install your own certificate, access server configuration files, or run command-line tools. Every fix for SSL and HTTPS problems on Wix happens either through the Wix dashboard or by updating content in the Wix editor. Understanding this constraint prevents wasted time looking for server-level solutions that do not exist on Wix.
SSL errors on Wix fall into four categories: certificate not active (usually a DNS or domain connection problem), site loading on HTTP when it should redirect to HTTPS (a separate toggle from the certificate itself), padlock warning showing a broken lock (mixed content from embedded or linked HTTP resources), and certificate pending or showing the wrong domain (custom domain connection issues). This guide addresses all four categories with Wix-specific diagnostic steps.
Identify Your Specific Problem First
| What you see | What it means | Jump to section |
| Browser shows ‘Not Secure’ warning or security error page | SSL certificate not active or not covering your custom domain | SSL not active on Wix |
| Site loads but address bar shows http:// without padlock | HTTPS redirect not enabled (SSL is active but HTTP is not redirected to HTTPS) | Enabling HTTPS redirect |
| Padlock shows a warning triangle or broken lock icon | Mixed content: some elements loading over HTTP despite the page being HTTPS | Mixed content errors |
| SSL shows as active in Wix but visitors still see errors | Domain DNS not fully propagated, or browser cached old connection | DNS propagation and cache |
| Custom domain shows SSL error but yourname.wixsite.com works fine | Custom domain DNS not correctly configured for SSL | Custom domain SSL issues |
SSL Not Active: How Wix SSL Works and Why It May Not Be Enabled
Wix provides free SSL certificates for all sites. For a Wix-managed domain (purchased through Wix), SSL is automatic and requires no setup. For a custom domain purchased from an external registrar and connected to Wix, the SSL certificate is issued after the domain is correctly connected to Wix’s servers.
If SSL is not active on your site, the most common cause is that the domain is not correctly connected to Wix, or the DNS changes have not fully propagated.
Check SSL status in the Wix dashboard
- Log in to your Wix account.
- Go to the Wix dashboard for your site.
- Navigate to Settings, then Domains.
- Find your domain in the list. The SSL status is shown next to the domain name. It shows either Active, Pending, or an error indicator.
- If status shows Pending, the SSL certificate is in the process of being issued. This typically completes within a few hours after DNS propagates correctly. If Pending persists for more than 24 hours, the DNS is likely not correctly configured.
Two ways to connect a custom domain to Wix (and how each affects SSL)
Wix supports two methods for connecting an external domain: pointing nameservers to Wix, or keeping the domain at your registrar and connecting via DNS records. The method matters for SSL.
Nameserver method (recommended by Wix): You update your domain’s nameservers at your registrar to Wix’s nameservers (ns1.wixdns.net and ns2.wixdns.net). Wix then manages all DNS for your domain. SSL activates automatically after nameserver propagation, typically within 24-48 hours. This is the method with the fewest SSL complications.
DNS record method (CNAME/A record method): You keep your domain at your registrar and add specific A records and CNAME records provided by Wix. SSL activation can take longer with this method and requires all required DNS records to be precisely correct. Wix requires specific A records and a specific CNAME record. If any record is missing or incorrect, SSL may not activate.
When using the DNS record method, Wix requires specific A records pointing to Wix’s servers AND a CNAME record for the www subdomain. Missing either causes SSL or site connectivity issues. Go to Domains in the Wix dashboard and click on your domain name to see exactly which DNS records Wix requires. Copy these values exactly into your registrar’s DNS settings.
Checking DNS propagation
DNS changes take time to propagate globally. After updating nameservers or DNS records, the SSL certificate typically activates within a few hours, but can take up to 48 hours. During propagation, some visitors see SSL errors while others do not, depending on which DNS server their device is using.
To check whether your DNS has propagated and is pointing correctly to Wix: go to dnschecker.org, enter your domain name, and check whether the A records and nameservers shown match what Wix requires. If most global locations show the correct values, the issue is propagation in progress. If records are showing wrong values, the DNS update was not saved correctly at your registrar.
HTTPS Redirect Not Enabled: The Common Step Most Users Miss
On Wix, having an active SSL certificate and having HTTPS enforced for all visitors are two separate settings. A site can have an active SSL certificate but still allow HTTP access if the redirect is not enabled. This results in visitors who type yourdomain.com in a browser connecting via HTTP rather than HTTPS, showing ‘Not Secure’ in the browser address bar even though HTTPS is available.
How to enable HTTPS redirect on Wix
- Go to your Wix dashboard.
- Click Settings.
- Select Domains.
- Next to your domain, click Manage.
- Find the HTTPS redirect setting. Depending on your Wix plan and account, this may be labeled ‘Redirect users to HTTPS’, ‘Enable HTTPS’, or ‘Force HTTPS’. Toggle it on.
- Publish your site after making the change.
On some Wix account setups, the HTTPS redirect is found under Settings, Advanced Settings, SSL Certificate. The exact location varies slightly between Wix Premium plans and older account structures. If you cannot find it under Domains, check under Advanced Settings or use the Wix Help Center search for ‘HTTPS redirect’ to find the current path for your account type.
Mixed Content Errors: The Broken Padlock on a Wix Site
If your site shows a padlock with a warning triangle or information icon, or Chrome shows a ‘Not Fully Secure’ message in the developer tools, mixed content is present. Mixed content means the main page loads over HTTPS but some resources on the page are loading over HTTP.
On Wix, mixed content almost always comes from one of four sources: external embeds with HTTP URLs, third-party apps installed from the Wix App Market, images or media uploaded with HTTP URLs in their link targets, or HTML code added via Wix’s embed or custom code features.
Finding mixed content on your Wix site
Open your site in a browser. Press F12 (Windows) or Command+Option+I (Mac) to open developer tools. Go to the Console tab. Reload the page. Mixed content warnings appear in the console listing the specific HTTP URLs causing the issue.
The console shows two types: warnings (passive mixed content: images and media that load but trigger the warning) and errors (active mixed content: scripts and iframes that are blocked entirely). Note down the specific URLs shown.
Fixing mixed content from external embeds
External content embedded via Wix’s Embed HTML widget or custom code boxes is the most common source of mixed content. If you embedded a widget, map, video player, social feed, or tracking script using an HTTP URL, update it to HTTPS.
In the Wix editor, find the embed element. Double-click to edit it. Look for any http:// URLs in the embed code. Change each one to https://. Most modern third-party services support HTTPS. If a service does not offer HTTPS, consider removing the embed or finding a Wix App Market alternative that is served securely.
Fixing mixed content from Wix App Market apps
Some older apps from the Wix App Market load resources over HTTP. If a console error shows an HTTP URL from an app domain, the fix is either to update the app (newer versions of most apps have been updated to HTTPS) or to remove the app if an update is not available.
Go to your Wix dashboard, click the Apps section, and check whether app updates are available. Remove any app that you no longer use, as inactive apps can still load HTTP resources in the background.
Fixing mixed content from linked images and media
If images in your site content have link destinations that use HTTP (for example, clicking an image navigates to http://example.com), some browsers treat these as mixed content. In the Wix editor, click on the image, check its link settings, and update any http:// link targets to https://.
Images themselves that are uploaded to Wix’s media library are served over HTTPS automatically by Wix. The mixed content issue with images is typically in their link destination, not the image file itself.
Custom Domain SSL Issues: When Your Domain Shows Errors but wixsite.com Works
If your site loads without SSL errors at yourname.wixsite.com but shows certificate errors at yourcustomdomain.com, the SSL certificate has not been issued for the custom domain. This is a domain connection problem, not a certificate problem per se: Wix issues the certificate automatically once the domain connection is confirmed.
The most common custom domain SSL problems on Wix
- Nameservers not updated at the registrar: If you chose the nameserver connection method but forgot to update the nameservers at your domain registrar, the domain is not connected to Wix. Check your registrar’s control panel and confirm the nameservers are set to ns1.wixdns.net and ns2.wixdns.net.
- Missing or incorrect DNS records: If using the DNS record connection method, any missing or incorrect A record or CNAME record prevents SSL activation. Compare the exact values Wix requires (visible in your Wix dashboard under Domains, then the specific domain) against what is currently set in your registrar’s DNS.
- Domain connected to wrong site: If you have multiple Wix sites, confirm the domain is connected to the correct one. In the Wix dashboard, go to Domains and verify the domain shows as connected to the intended site.
- CAA record blocking Wix’s CA: If your domain has a Certification Authority Authorization (CAA) DNS record set to allow only specific CAs, and Wix’s certificate authority is not in that list, Wix cannot obtain an SSL certificate. Check whether your domain has a CAA record in your DNS settings. If it does, add Wix’s CA to the allowed list or remove the restrictive CAA record. Most domains do not have CAA records; this is a less common issue.
Waiting period after domain connection
After correctly connecting a custom domain to Wix, SSL activation is not instant. Wix typically completes the SSL certificate issuance within a few hours after the DNS has fully propagated. During this time, the Wix dashboard shows the SSL status as Pending. If the status remains Pending for more than 24 hours after DNS has confirmed propagation, contact Wix support, who can manually trigger certificate reissuance.
What Wix Manages Automatically vs What You Control
| Wix manages automatically | You control through the Wix dashboard or editor |
| SSL certificate issuance and renewal | Whether HTTPS redirect is enabled (must be toggled on separately from the certificate) |
| Certificate renewal before expiry | Content links in your editor (HTTP vs HTTPS link targets) |
| Certificate type (DV from Wix’s CA) | Third-party apps installed from the App Market |
| HTTPS serving of Wix’s own infrastructure and media library | HTML embed code you have added to the site |
| Security of the Wix platform itself | External scripts and tracking pixels added via Wix’s custom code feature |
One common misconception is that purchasing or adding a separate SSL certificate improves Wix site security or fixes SSL errors. Wix does not support custom SSL certificates. You cannot install a certificate from a commercial CA on a Wix site. All SSL on Wix is handled by Wix itself. If you need a specific certificate type (OV or EV level with your organization’s name, for example), Wix is not the right platform. Standard DV certificates (which is what Wix provides) are appropriate for the vast majority of websites.
Frequently Asked Questions
Does Wix provide free SSL?
Yes. All Wix Premium plans include SSL certificates at no additional cost, and they are automatically issued and renewed by Wix. You do not need to purchase, install, or renew SSL certificates on Wix. For sites with custom domains, SSL activates automatically after the domain is correctly connected to Wix via nameservers or DNS records.
Why does my Wix site show ‘Not Secure’ after connecting a custom domain?
The most common reason is that the domain DNS has not been correctly configured or has not yet propagated. Wix cannot issue the SSL certificate until it confirms it controls the domain. Check your DNS settings at your registrar against the values Wix requires (found in your dashboard under Settings, Domains). If the DNS values are correct and 24-48 hours have passed, check whether the SSL status in your Wix dashboard shows Pending or shows an error. If pending persists beyond 48 hours with correct DNS, contact Wix support.
My Wix site has a padlock but it shows a warning. What is wrong?
A padlock with a warning triangle means mixed content: the main page loads over HTTPS but some elements on the page are loading over HTTP. Open browser developer tools (F12), go to the Console tab, and reload the page. The console shows warnings or errors listing the specific HTTP URLs. On Wix, mixed content typically comes from third-party embeds added via HTML code, older App Market apps, or links in content pointing to HTTP destinations. Update the embed code to use HTTPS URLs, update apps, and update any HTTP link targets in your content.
Can I install my own SSL certificate on Wix?
No. Wix does not allow custom SSL certificate installation. All SSL is managed by Wix using their own certificate authority infrastructure. If you need a specific certificate type that Wix does not provide (such as an OV certificate with your organization’s verified name), you would need to host your site on a self-managed server or a hosting platform that allows custom certificate installation. For most websites, the DV certificate that Wix provides is appropriate and browsers show no difference in the padlock display.
How long does Wix SSL take to activate after connecting a custom domain?
SSL activation typically completes within a few hours after DNS has propagated correctly. DNS propagation itself takes up to 48 hours after you update nameservers or DNS records at your registrar. During DNS propagation, some visitors may see SSL errors while others see the secure site, depending on which DNS server their device queries. Once DNS propagation is complete and Wix confirms domain control, the SSL certificate is usually issued within a few hours. The SSL status in your Wix dashboard under Settings, Domains shows the current state.
