“Only secure content is displayed” notification in Internet Explorer 9

When viewing a website in Internet Explorer 9, you receive a message that says "Only secure content is displayed."

This message is telling you that there may be both secure and non-secure content on the page. Secure and non-secure content, or mixed content, means that a webpage is trying to display elements using both secure (HTTPS/SSL) and non-secure (HTTP) web server connections. This often happens with online stores or financial sites that display images, banners, or scripts that are coming from a server that is not secured. The risk of displaying mixed content is that a non-secure webpage or script might be able to access information from the secure content.

Important: Internet Explorer 9 blocks non-secure content by default and is set to prompt you when this is happening. Changing this setting may make your computer vulnerable to viral, fraudulent or malicious attacks. Microsoft does not recommend that you attempt to change this setting.  Modify this setting at your own risk.


To Disable/Enable/Prompt the “Only secure content is displayed” message:

1. Start Internet Explorer.
2. On the Tool menu, click Internet Options.
3. Click the Security tab, and then click Custom level.
4. In the Settings box, scroll down to the Miscellaneous section, and under Display mixed content choose from the following options:
   
   Disable, will not display non-secure items.
   Enable, will always display non-secure items without asking
   Prompt, will prompt you when a webpage is using non-secure content

Note: Internet Explorer 9 blocks non-secure content to keep your information safe and is set to Prompt by default. When this setting is set to Enable, Internet Explorer does not prompt you with the "Only secure content is displayed" message even if the webpage is using non-secure elements.

To learn more about the risks of allowing mixed content, see the following Internet Explorer 9 blog post: