Appropriate permissions to ensure the security of your WordPress site:
-
755 for directories
-
644 for files
The permissions above are the recommended settings for keeping your site secure. However, as mentioned earlier, full permissions may be necessary for a plugin to work or to resolve a caching issue. At Clouding.io we strongly recommend that you avoid making these changes and look for an alternative, as doing so creates a security vulnerability that could allow attacks.
The alternatives are as follows:
- If you have a web hosting service, you can do this from the “Administrador de archivos“, by clicking the appropriate button to change the permissions.
- You can make the changes via FTP using a client such as FileZilla, by right-clicking a file or directory and changing its permissions.
- You can also make the changes via SSH. Our article Changing permissions in Linux explains the steps for making these changes.
We also recommend taking a look at our article on how to improve WordPress security if you have any further questions about this topic.