How octal permissions work
Each digit is the sum of read (4), write (2) and execute (1) for the owner, the group and everyone else.
| Mode | Symbolic | Typical use |
|---|---|---|
| 644 | rw-r--r-- | Web files: owner edits, everyone reads |
| 755 | rwxr-xr-x | Folders and scripts |
| 600 | rw------- | Private files such as SSH keys and .env |
| 700 | rwx------ | Private folders |
| 777 | rwxrwxrwx | Everyone can write — avoid on servers |
A fourth leading digit sets special bits: 4 = setuid, 2 = setgid, 1 = sticky (e.g. 1777 for /tmp). Type either form and the calculator shows the other, a breakdown table and the chmod command.
Frequently asked questions
What permissions should WordPress files have?
Usually 644 for files, 755 for folders and 600 or 640 for wp-config.php.
Why is 777 dangerous?
Any user or process on the server can modify the file, which attackers can abuse.
What does the x permission mean on a folder?
It allows entering the folder and accessing files inside it.