Occasionally, you may encounter issues with images not displaying correctly on your WordPress site. If you observe a media library that resembles the following, it’s probable that you’re dealing with broken media files: As a seasoned Website Design Company in Kochi, our team understands the importance of resolving such issues promptly to ensure your website functions seamlessly.

There could be several reasons for this images are not working issue, including potential security threats or server problems. If you’ve recently installed or updated a plugin, try disabling it to see if it’s causing the problem. Incorrect file permissions might also be the culprit. To address this, we suggest changing your upload permissions to 755. If this doesn’t resolve the images are not working problem, you might want to perform a security check and reach out to your hosting provider for assistance.
What are file permissions?
Understanding file permissions is crucial for a well-functioning website. These settings determine the actions different users can take with files on your server, ensuring the smooth operation of your online platform. As a Website Design Company in Kochi, we recognize the importance of these technical aspects in delivering a seamless user experience.
File permissions, such as read, write, and execute, govern what a user can do with a file or folder. While these ‘users’ aren’t the same as WordPress users, they refer to individuals or programs on your web server, typically set up by your hosting provider. The three categories of users – Owner, Group, and Public – play a key role in defining access levels.
Your hosting provider handles the creation of these user types, simplifying the process for website owners. For those unfamiliar with the intricacies of file permissions, rest assured; it’s not essential for non-developers to delve into these specifics. We’re providing this explanation to help you navigate these terms should they arise in your exploration of file permissions.
In total, there are nine permission setups, as each user type can have three different permissions: read, write, and execute. When configuring your website, the usual practice is to grant the Owner the highest level of permissions, followed by slightly fewer for the Group, and the least for the Public.
For instance, when setting up permissions for WordPress files, the Owner may have read and write access, the Group may have read-only access, and the Public is typically granted read-only permissions. These configurations play a crucial role in the proper functioning of your website, ensuring that images and other elements display seamlessly to enhance the overall user experience.
Why do WordPress file permissions matter?
Having the right WordPress file permissions is crucial for your site’s security and performance.
If you make your file permissions too open, it’s a security risk because unauthorized people might be able to change or run files they shouldn’t. This could lead to inserting harmful code on your site.
However, if you make your file permissions too strict, your site might not work correctly. If certain users can’t even read files on your server, your WordPress site won’t function properly.
For instance, overly strict file permissions can often cause problems with WordPress plugins because the plugin may not be allowed to modify necessary files.
That’s why you usually grant some permissions to file users, but not too many.
Is it necessary for everyone to adjust their file permissions?
Honestly, no. Most people won’t have to deal with WordPress file permissions.
Why? Well, if you pick a good WordPress hosting provider, they should set up WordPress to use the right file permissions automatically for their server.
I’ve been using WordPress for more than ten years, and I’ve never had to manually adjust file permissions. That’s because I’ve always trusted my hosting provider to handle it.
However, there can be situations where you might need to make a small change. Sometimes, things can go wrong in strange ways, and checking file permissions can be a helpful step in fixing certain issues, like the “403 Forbidden” error.
In simple terms:
- If you have good WordPress hosting and no particular problems with file permissions, you likely don’t need to make any changes.
- But if you’re trying to fix a specific issue or recently moved your site from a test environment to live hosting, you might have to check and adjust your site’s file permissions manually.
What do the different numbers in file permissions mean?
File permissions are often shown as three numbers, such as 644. You might also come across a format with letters and dashes like rw-rw-r–, but it’s not as common.
Each of these three numbers stands for a different kind of user:
- First digit – Owner.
- Second digit – User accounts in the owner’s groups.
- Third digit – Public.
Then, each action is assigned a number:
- Read – 4
- Write – 2
- Execute – 1
The number in each digit spot tells you what actions a specific type of user can take. For instance, if the first digit is “6,” it means the Owner can Read (4) and Write (2), which adds up to 6.
If a user type has all permissions, the number becomes 7 (4+2+1).
That’s why 777 allows all three user types to do all three actions.
However, you should almost never set WordPress file permissions to 777. It’s a big security risk. Unless you’re absolutely sure, never use 777 for any file or folder.
What are the correct WordPress file permissions?
Now that you know what file permissions are, let’s discuss the best setup for WordPress.
But there’s something important to note: the exact setup can vary depending on your hosting provider and how they’ve set up your server.
If you’re unsure, it’s a good idea to follow your host’s recommendations because they know what works best for their system.
That said, the file permissions we’re about to recommend should be suitable for most WordPress websites.
We’ll talk about the best file permissions for four specific parts:
- WordPress files
- WordPress folders
- wp-config.php
- .htaccess
The last two files are important and need extra care.
WordPress file permissions
For WordPress files, use 644 permissions in general. However, there are two specific files we’ll mention later that might need different permissions.
WordPress folder permissions
For WordPress folders, use 755 permissions across the board.
WordPress wp-config.php file permissions
The right permissions for this file can vary depending on your hosting provider’s setup. Some hosts set it to 644, similar to other WordPress files. This is the case with many popular managed WordPress hosts.
However, the official WordPress Codex suggests using 440 or 400 for the wp-config.php file. Some security experts recommend 444, while others suggest 640 or 600.
In simple terms, there are different options. If you’re unsure, it’s best to ask your host for their recommendation based on how they’ve configured things. Alternatively, you can start with 440 or 400.
WordPress .htaccess file permissions
The .htaccess file is another essential configuration file that you might want to control access to more tightly.
Similar to the wp-config.php file, some hosting providers set the .htaccess file to 644, just like other WordPress files. This is also the recommendation from the official WordPress.org Codex, so it’s a good starting point. This is because many plugins need to make changes to the .htaccess file, including caching plugins.
However, some security experts, like iThemes Security, suggest using 444 instead. However, keep in mind that if you use 444, your plugins won’t be able to make changes to the .htaccess file, which could cause problems.
How to change file permissions
Now that you grasp the importance of correct file permissions, let’s delve into the practical aspect of changing them for your WordPress site. The simplest method involves using FTP (File Transfer Protocol) and a preferred client, like the free and open-source FileZilla. If your hosting provider utilizes cPanel, the cPanel File Manager is another option, although I’ll emphasize the FTP approach here.
Begin by connecting to your WordPress site’s server via FTP, and our comprehensive guide on using FTP with WordPress can assist if needed. In FileZilla, for instance, locate the folder housing your WordPress site, alongside the wp-admin and wp-content folders.
To adjust file permissions, right-click on one or more files or folders, selecting ‘File Permissions.’ For instance, by right-clicking on the wp-content folder, you can confirm its permissions set at 755, the desired configuration.
If modifications are necessary, easily input the correct numbers in the ‘Numeric value’ box and click ‘OK’:
As a trusted Website Design Company in Kochi, we understand the intricacies of maintaining optimal website functionality. Feel free to reach out for further guidance on managing your WordPress site effectively.

To make things quicker, FileZilla offers a ‘Recurse into subdirectories’ option. This means you can apply the same file permissions to all the files and folders inside the directory you’ve chosen.
However, keep in mind that WordPress files and folders should have different permissions. So, be sure to use the sub-options that say ‘Apply to files only’ or ‘Apply to directories only’ as needed.
For instance, to quickly apply the correct permissions to all your folders, you could:
- Select all of the folders.
- Right-click and choose File Permissions.
- Enter 755.
- Select Recurse into subdirectories.
- Select Apply to directories only (so that you don’t change the file permissions for files inside the folders that you’ve selected).
- Click OK.

This will allow you to quickly set 755 permissions for all the folders on your server. You can apply the same concept to set 644 permissions for all files.
How We Can Support You?
With our roots grounded in Kakkanadu, Ernakulam (Kochi), and boasting over 12 years of expertise, we’ve emerged as a prominent force in the IT industry. Offering advanced and reliable services, we are more than a Website Design Company in Kakkanad, Ernakulam (Kochi), we are your dedicated collaborators in success. Whether you’re embarking on a new project, seeking assistance with existing systems, or requiring expert IT consultation, we stand as your partners in progress. Our solutions are meticulously tailored to align with your unique objectives, ensuring a transformative journey from vision to reality. Reach out to us for all your IT needs, encompassing Website Development, Software Development, Mobile App Development, and expert consultation. Together, let’s leverage technology’s potential to attain greater heights.
Frequently asked questions
Dieutek Developments is located in Kakkanadu, Ernakulam (Kochi), with over a decade of experience in delivering high-quality IT solutions.
Dieutek Developments provides a comprehensive range of IT services, including website development, website redesign, custom software development, ecommerce store development, web and mobile app development, and digital marketing.
Yes, Dieutek Developments specializes in custom software development, utilizing various technologies such as WordPress, PHP-based frameworks like Laravel and Zend, and JavaScript frameworks like React and Node.js to create robust and scalable web applications.
Certainly, Dieutek Developments offers concept-to-completion website development and website redesign services to cater to clients' specific needs.
Dieutek Developments excels in building ecommerce stores, providing customization options and expertise in integrating various platforms and tools, along with payment gateway integration both domestically and internationally.
Yes, Dieutek Developments offers mobile app development services for Android, iOS, Flutter, and hybrid platforms.
Absolutely, Dieutek Developments offers IT consultation services to assist clients in Kakkanadu, Ernakulam (Kochi), in aligning their IT strategies with their business goals.
Dieutek Developments has expertise in various industries, including Healthcare, Retail, E-commerce, Restaurants, Church, Education, NGO, Travel & Tourism, and Entertainment, providing tailored IT solutions for each sector.
Dieutek Developments boasts a team of 35+ professionals with over 13 years of experience in the IT industry, based in Kakkanadu, Ernakulam (Kochi).
To get in touch with Dieutek Developments for sales and business development queries, you can contact us at +91 7012287156.
Conclusion
In conclusion, ensuring proper file permissions in WordPress is crucial for safeguarding your website’s security and functionality. The right permissions, like 644 for files and 755 for folders, prevent unauthorized access and maintain the smooth operation of plugins and themes. However, individual files such as wp-config.php and .htaccess may need customized settings, depending on your hosting provider’s recommendations. Utilize FTP clients like FileZilla to modify file permissions effectively. If you’re uncertain, seek guidance from your hosting provider. As a seasoned Website Design Company in Kochi , we emphasize the importance of secure web practices for a reliable online presence.


