Use the least-permissive settings that still let your site work. Standard, secure values are:
- Files: 644 — owner can read/write, others can only read.
- Folders: 755 — owner can write, others can enter and read.
- Sensitive config files (like
wp-config.php): 600 or 640.
Never set files or folders to 777 — that lets anyone write to them and is a common cause of hacks. To change permissions, open File Manager in cPanel, right-click a file or folder, and choose Change Permissions, or use an FTP client's permissions option.
If a script asks for 777 to work, it's usually a misconfiguration; 755 plus correct ownership is almost always enough. If you're unsure which files need writable access, open a ticket and we'll advise.
