403 Forbidden

A 403 Forbidden means the server understood what you asked for and is refusing to give it to you. Unlike a 401, logging in will not usually help.

What to do

  1. Check the file and folder permissions. Files should normally be 644 and folders 755. A folder set to 700 will give a 403.
  2. Check whether an index file exists. Asking for a folder with no index.html or index.php in it often returns 403.
  3. Look in .htaccess for a Deny or Require rule blocking access.
  4. Check whether your IP has been blocked. Firewalls and security plugins block addresses after failed logins.
  5. If it only happens on some requests, a firewall rule is probably the cause rather than the file itself.

403 or 401?

401The server does not know who you are. Log in and try again.
403The server knows and is saying no. Retrying will not change it.

Why it happens

  • Wrong file or folder permissions
  • No index file in the folder you asked for
  • A rule in .htaccess blocking the request
  • Your IP address is blocked
  • A security plugin or web firewall stepped in
  • Hotlink protection, if the request is for an image

Defined in RFC 9110. See also MDN.