Which file permissions should my site have?

Why permissions matter

Permissions decide who can read and change your files. Too strict and Joomla can't install or update anything; too open (777) and anyone who gets a foothold on the server can change your site.

Recommended

• Folders: 755.
• Files: 644.
• configuration.php: 444 (read-only) once your settings are done; Joomla switches it to writable while saving Global Configuration.
• Never 777. If something only works with 777, the file owner is wrong: ask your host.

Reset them with SSH

In the site folder: find . -type d -exec chmod 755 {} \; for folders and find . -type f -exec chmod 644 {} \; for files.

Good to know

• On most shared hosting (suPHP/suExec), the web server runs as your user, so 755/644 is all Joomla needs.