WPBeginner»Blog»Tutorials»How to Fix the 403 Forbidden Error in WordPress

By Editorial Staff | Reviewed by Syed Balkhi | May 31, 2024 | Reader Disclosure

Are you dealing with the 403 Forbidden error on your WordPress site?

403 Forbidden error is one of the most annoying errors that a WordPress website owner can encounter. It may stop you from accessing your WordPress admin area and/or specific pages on your website.

In this article, we will show you how to easily fix the 403 Forbidden error in WordPress.

The 403 Forbidden error code is shown when your server permissions don’t allow access to a specific page on your WordPress website.

This error is usually accompanied by the text:

403 Forbidden – You don’t have permission to access ‘/’ on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

Here’s an example of what it looks like:

There are different scenarios when you might see this error. For example:

You may also see ‘Access Denied’ instead of the full 403 Forbidden status. Alternatively, the message might say, ‘Access to yourdomain.com was denied. You don’t have authorization to view this page.’

For more explanation about WordPress error codes, you can see our list of the most common WordPress errors and how to fix them.

Now that you know about the different types of 403 errors, let’s talk about their causes.

The 403 Forbidden error code appears when your server doesn’t permit access to a specific page. There are several causes that can make this happen.

One common cause for the 403 Forbidden error in WordPress is poorly configured security plugins. Many WordPress security plugins can block an IP address (or a whole range of IP addresses) if they believe them to be malicious.

Another possible cause could be a corrupt .htaccess file or incorrect file permissions on your server.

Your WordPress hosting company can sometimes make accidental changes to their server settings. This may result in a 403 Forbidden error on your site.

Having said that, let’s take a look at how to fix the 403 forbidden error in WordPress.

Note: Before you do anything, we recommend creating a complete WordPress backup of your website. You can check out our guide on how to back up your WordPress site.

If you are using an automatic WordPress backup plugin, then make sure that you have access to the latest backup before moving forward.

You can use these quick links if you want to skip to a specific method:

If you prefer written instructions, then just continue reading.

The first thing you need to do is see if one of your WordPress plugins is causing the 403 forbidden error. To do this, you need to temporarily deactivate all WordPress plugins. This includes any security plugins that you may have installed on your site.

If this resolves your problem, then this means one of the plugins on your website was causing this error.

You can figure out which plugin was causing the error by activating all your plugins one at a time until you reproduce the 403 Forbidden error. Then, you will need to delete the problem plugin and look for an alternative or contact the developers for support.

If this method doesn’t work, then just continue reading.

Often, the 403 forbidden error is caused by a corrupt .htaccess file in your WordPress site. The good news is that fixing this file is quite easy.

First, you need to connect to your website using an FTP client like FileZilla or the File Manager app in cPanel.

Next, find the .htaccess file in the root folder of your WordPress site. See this guide if you can’t find the .htaccess file in Your WordPress folder.

You will need to download the .htaccess file to your computer so that you have a fresh backup of it. After that, simply delete the file from your server. Don’t worry, your WordPress will still be able to work.

Now, try accessing your website. If the 403 forbidden error is resolved, then this means that your .htaccess file was corrupt.

You can generate a fresh .htaccess file by logging in to your WordPress admin area and going to the Settings » Permalinks page.

Simply click on the ‘Save Changes’ button at the bottom of the page, and WordPress will generate a new .htaccess file.

If the other solutions have not fixed the 403 forbidden error on your site, then incorrect file permissions are the most likely cause.

All files stored on your website have file permissions. These file permissions control who can access the files and folders on your WordPress website.

Incorrect file permissions can cause the 403 forbidden error. They make your web server think that you do not have permission to access those files.

You can ask your WordPress hosting provider to check your website for correct file permissions. Some hosts are very supportive, so they won’t mind and will probably fix that for you.

Changing file permissions yourself can have serious consequences. If you do not feel confident doing it yourself, it’s best to ask a fellow WordPress website owner for help or hire a professional.

However, if you want to do it yourself, then here is how to check your file permissions.

Simply connect to your WordPress site using an FTP client. Navigate to the root folder containing all your WordPress files.

Click to select a folder, right-click it, and then select ‘File permissions’ from the menu.

Your FTP client will show you a file permissions dialog box like this:

All folders on your WordPress site should have a file permission of 744 or 755.

Meanwhile, all files on your WordPress site should have a file permission of 644 or 640.

You can set the file permission for the root folder to 744 or 755. You also need to check the box next to ‘Recurse into subdirectories’ and then check the option that says ‘apply to directories only’.

Simply click on the ‘OK’ button. Your FTP client will now start setting permissions for all subdirectories in that folder.

Once it is done, you need to repeat the process for all the files. This time, you will use file permission of 644 or 640, and don’t forget to select the ‘Recurse into subdirectories’ and ‘Apply to files only’ options.

Click on the ‘OK’ button, and your FTP client will start setting file permissions for all the selected files.

Try accessing your website now and see if the 403 forbidden error has gone.

Sometimes a simple fix can be the most effective. Clearing your browser cache and cookies, as well as your WordPress cache if you’re using a caching plugin, can resolve the 403 forbidden error.

Just like how your computer stores temporary files to speed up loading times, your browser also caches website data. If this data becomes corrupted, it might cause compatibility issues and lead to the 403 error.

Similarly, a corrupted cache generated by a plugin can also lead to the server misinterpreting requests.

Some caching plugins also offer advanced settings that allow you to restrict access to specific pages or user roles. If these settings are accidentally misconfigured, they could unintentionally block access to certain parts of your website.

To clear your browser cache, you can follow the instructions in our article on how to clear cache in major browsers.

If you’re using a WordPress caching plugin, you can read our guide on how to clear WordPress cache and consult the plugin’s documentation.

If you’re using a Content Delivery Network (CDN) to improve website performance, it’s possible that it might be interfering and causing the 403 forbidden error.

A CDN acts as a middleman between your website’s server and visitors, serving cached content from geographically distributed locations for faster loading times.

To see if your CDN is the culprit, you can disable your CDN temporarily. Then, test your website to see if the error disappears.

If disabling the CDN resolves the error, you’ll need to contact your CDN provider’s support team for further troubleshooting.

Malicious software can cause a variety of issues including the 403 forbidden error. It can interfere with file permissions, inject malicious code, or disrupt communication between your website and server.

To see if there’s malware on your website, we recommend scanning your website using a security plugin or a service offered by your WordPress hosting provider.

Many reputable security plugins offer malware-scanning features, and you can usually remove these malicious files in one click.

Having other problems with WordPress? Perhaps one of these guides can help you solve the issue:

We hope this article helped you fix the 403 forbidden error in WordPress. You may also want to see our list of the most common block editor problems and must-have WordPress plugins to grow your website.

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.

13 Things You MUST DO Before Changing WordPress Themes

How to Start a Podcast (and Make it Successful) in 2024

How to Install Google Analytics in WordPress for Beginners

How to Fix the Error Establishing a Database Connection in WordPress

Disclosure: Our content is reader-supported. This means if you click on some of our links, then we may earn a commission. See how WPBeginner is funded, why it matters, and how you can support us. Here's our editorial process.

Editorial Staff at WPBeginner is a team of WordPress experts led by Syed Balkhi with over 16 years of experience in WordPress, Web Hosting, eCommerce, SEO, and Marketing. Started in 2009, WPBeginner is now the largest free WordPress resource site in the industry and is often referred to as the Wikipedia for WordPress.

The Ultimate WordPress Toolkit

Get FREE access to our toolkit - a collection of WordPress related products and resources that every professional should have!

Syed Balkhi

Hey WPBeginner readers,Did you know you can win exciting prizes by commenting on WPBeginner?Every month, our top blog commenters will win HUGE rewards, including premium WordPress plugin licenses and cash prizes.You can get more details about the contest from here.Start sharing your thoughts below to stand a chance to win!

Samuel

Tip – For those of you, who want to utilize Method 1, “How to deactivate your plugin Temporarily” and you don’t have access to the WordPress dashboard as a result of the 403 Forbidden error and you need to deactivate plugins, please check this resource below for how to go about it. https://www.wpbeginner.com/beginners-guide/how-to-easily-deactivate-wordpress-plugins

Cody Wheeler

Thanks for the help. Bad htaccess for the lose!

WPBeginner Support

You’re welcome, glad our guide was helpful!

Admin

Jiří Vaněk

I encountered the same error, and none of the suggested solutions helped. Eventually, I discovered that the problem was with the web hosting provider, who had applied protection using GEO-IP blocking on certain folders and functions. Specifically, it was the administration and XML-RPC. I had to request permission for certain countries since I was using a VPN to access the website. Sometimes, this error can also occur due to the protection implemented by the web service provider. Their reasoning was that this protection helps prevent brute force attacks.

mohadese esmaeeli

Hello, good day. I appreciate your efforts in creating this content. The presence of a 403 error is often due to permission issues. I have encountered it multiple times, and most of the time, fixing permissions resolves the error. I’ve successfully resolved my site’s 403 error with the help of this guide before.

Hans Dieter

Thank you very much! Helped a lot.

WPBeginner Support

You’re welcome, glad to hear our guide was helpful!

Admin

Kevin

For my site it ended up being ModSecurity. I eliminated any robots.txt and .htaccess issues. I found the issue when looking at the apache log and then whitelisted the rule. All was fine after that . Took about 4 days to figure it all out.

WPBeginner Support

Thanks for sharing this for anyone else who runs into the same issue!

Admin

Mungukende Joshua

Thanks, my .htaccess file was corrupted. God bless u

WPBeginner Support

Glad to hear our guide could help!

Admin

iri

Thanks for this information! It has been very helpful. I had this error in several pages with broken images (I think this happened after buying a larger hosting plan) and it seems the problem was a corrupted .htaccess file, but thanks to this info I solved it in one minute!

WPBeginner Support

Glad to hear our guide was helpful!

Admin

Ayouba Seybou

Hello,i am getting the same error but in my case, i have access to my dashboard. the the problems begin when i click on some admin menu like page, update, setting.

WPBeginner Support

Our recommendations would be the same even if you still have access to your wp-admin area.

Admin

Wendy Clash

Thank you so much. I had to restore my website and I got this error. The entire folder for my wordpress site dit not have the right permissions. I changed it and it worked. Thanks so much.

WPBeginner Support

Glad to hear our guide was helpful!

Admin

Denie

You may also try to disable MODSECURITY on your webserver settings / cpanel.

WPBeginner Support

Thank you for sharing that, if it gets to the point where disabling mod security is what you want to try, we would recommend most beginners reach out to their hosting provider instead to see if their host sees an error or something on their end that could be fixed.

Admin

Peaky

Hey thanks for this GuideSaves me from a long headacheNb : Deactivate Litespeed Cache fix my problem

WPBeginner Support

Glad this guide could help!

Admin

meysam

thanks, delete .htaccess is worked for me.

WPBeginner Support

Glad our guide could help

Admin

Anmol Gupta

The same error can occur when index.php file can be missing in the var/html folder.

Sazid

Thanks. Deleting .htcacess file worked for me.

salah attalhi

thanks mate, this worked with me, deleting .htaccess

WPBeginner Support

Glad our guide was helpful

Admin

Jason Gomes

I am getting 403 Error on Updates page as well as Plugins Add new page any suggestions what can I Do?

WPBeginner Support

Reach out to your hosting provider for them to take a look and they should be able to help fix that issue.

Admin

Suraj

I tried all the mentioned points. My site is still showing the same message as “”Your connection is not private” and “403 Forbidden”. Please help…

WPBeginner Support

If none of our recommendations are able to assist you, we would recommend reaching out to your hosting provider to ensure there are no issues on their end.

Admin

Luke

top!! i have problem after namecheap upgrade my host!! with your article i solve!! Thanks

WPBeginner Support

Glad our guide helped

Admin

David Holywood

THere MUST be more reasons. I still have the ‘Forbidden’ problem

WPBeginner Support

There can be or sometimes the host may prevent the file permissions from being changed. If our guide did not help we would recommend reaching out to your hosting provider and they should be able to assist.

Admin

ken

Thank you, renaming htacces file fixed it

WPBeginner Support

Glad our guide could help

Admin

Aditya PF

Hi, how to solve the 403 forbidden but only happens when try to publish or update post/pages? I have no problems when accessing website or upload media

WPBeginner Support

Reach out to your hosting provider for them to take a look and they should be able to assist and fix that issue.

Admin

Amer Huzaifa

thanks so much u helped me so much with this issue

WPBeginner Support

Glad our guide was helpful

Admin

momna

The plugin thing worked for me. Thank you thank you so much