webzod
account

Make forms submit over HTTPS on Shopify

headers.resources.insecure_form · effort: minutes

Why it matters

A form that posts to an http:// address sends whatever visitors type, such as passwords or contact details, unencrypted. Browsers also warn visitors before submitting it.

The fix

  1. Shopify's own forms post over https. Search the theme code (Online Store, Themes, Edit code) and custom HTML in pages for form tags whose action starts with http://.
  2. Replace them with the https URL from the provider's current embed code.

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.