What file permissions should my website use?

File permissions control who can read, write or run each file on your hosting. Getting them right keeps attackers from modifying your files, while wrong permissions can either break your site or leave it exposed.

Recommended defaults for a typical site:

• Folders: 755 (owner can write; others can read and enter).
• Files: 644 (owner can write; others can read).
• Sensitive config files such as WordPress's wp-config.php: 600 or 640 so they are not world-readable.

Never use 777 on files or folders. It lets anyone write to them and is a common cause of hacked sites. If a plugin insists on 777 to work, that is a red flag.

To change permissions, use the File Manager in the DirhamHost control panel (right-click a file, choose Change Permissions) via my.dirhamaday.ae, or set them over FTP/SSH with chmod.

If your site suddenly shows a 403 Forbidden or 500 error after a permissions change, it is often because folders lost the 755 or a script lost execute rights; setting them back usually fixes it. Unsure what a file should be? Contact our 24/7 team on WhatsApp +971 58 553 6767 or support@dirhamaday.ae and we will advise.