How do I fix a 403 Forbidden error?

A 403 Forbidden error means the server found the page but refused to show it. The usual causes are a missing home page, wrong file permissions, a rule in .htaccess, or the security firewall blocking a request.

Work through these in order. Note whether the error affects the whole site, one page, or only something you do, such as saving a post.

Check there is a home page. The site’s folder needs a file called index.html or index.php. If your files are inside a sub-folder of public_html, move them up a level. See How do I upload my website files?
Check permissions. In File Manager, folders should be 755 and files 644. A file set to 600 or a folder set to 700 can’t be read by the web server. Leave public_html itself as cPanel set it.
Check .htaccess. Show hidden files, then rename .htaccess to .htaccess-off and reload. If the error goes, look in the file for lines such as Deny from all or Require all denied, or IP rules added by a security plugin.
Check hotlink protection. If only your images fail on another site or app, look at Security → Hotlink Protection in cPanel and add the address that should be allowed.
Check the firewall. If the 403 appears only when you submit a form, save a post or upload a file, the server’s web application firewall may have stopped the request. Send us the page address, the time and your IP address in a ticket so we can see which rule caught it.

Tip: Turn off Wi-Fi and open the site on your phone’s mobile data. If it works there but not in the office, the block is against your office’s IP address, not your website: see The firewall blocked my IP address.

WordPress shows 403 after I installed a security plugin.: Its rules may be blocking you. Rename the plugin’s folder in wp-content/plugins to switch it off, log in, and adjust its settings.
Is a 403 the same as my account being suspended?: No. A suspended account shows its own page. If you think your account is suspended, check for unpaid invoices under Billing → My Invoices.

Still stuck? Open a support ticket with the page address, the time and your IP address, or message us on WhatsApp.

Updated 6 November 2026. Something here out of date? Tell us.