Recommended permissions for web files and folders

Introduction

File and folder permissions control who can read, write or run content inside your hosting account.

Using the correct values helps your website work correctly while reducing unnecessary security risks.

What do 644 and 755 mean?

644 for files

This is a common safe value for normal files because it allows the owner to modify the file while the server can still read it.

755 for folders

This is a common safe value for directories because it allows access and traversal without making the folder fully writable by everyone.

How to change permissions from FTP

Most FTP clients let you right-click a file or folder and choose File permissions or CHMOD.

How to change permissions from the control panel

You can often change permissions from the file manager in cPanel or DirectAdmin as well.

When should you review permissions?

Check them when:

• A website stops loading files correctly.
• Uploads fail.
• A script cannot write where it should.
• You see a permissions error such as Permission denied.

Is 777 a good idea?

Normally, no. Permissions such as 777 are too permissive and can expose the site to security problems.

Final recommendations

Use the least permissive values that still let the website work correctly. In many standard cases, 644 for files and 755 for directories are the right starting point.