Permissions decide who can read, write and run each file on your hosting. Wrong permissions cause two classic problems: the site breaks with errors — or a folder is left wide open to abuse. The correct values are simple, and this guide shows where to set them.
The standard values (all you need)
| Files: 644 | Owner can read + write; everyone else can read. The correct value for almost every website file. |
| Folders: 755 | Owner can do everything; everyone else can look inside and open files. The correct value for almost every folder. |
| Config files with passwords (wp-config.php) | 600 or 640 is safer where the site still works with it — the file holds your database password. |
| Never: 777 | "Everyone can write" invites abuse. If any guide demands 777 to work, that guide is the problem. |
Steps: change a permission
- cPanel → File Manager → find the file or folder.
- Right-click it → Permissions (the current value also shows in the Permissions column).
- Tick the boxes or type the number — 644 for a file, 755 for a folder.
- Click "Change Permissions" and reload your website to confirm it works.
✅ Result: The file or folder now has safe, standard permissions — the website works, and nobody has more access than they need.
⚠ Common mistakes & fixes
- Setting 777 "to make the plugin work": the real problem is usually a wrong folder owner or a missing folder. Fix the cause; 777 on a live site is an open door.
- Uploads folder suddenly 403/404: a permissions change set it too strict (e.g. 600 on a folder). Folders need 755 so the web server can read what's inside.
- Changing everything at once "just to be sure": permissions are already right on a healthy site. Change only the specific item a real error points to.
Related articles
- File Manager Basics: Upload, Edit & Extract Files
- Fix: WordPress White Screen / 500 Error
- How to Secure Your WordPress Website