How to Fix a 403 Forbidden Error

Fixing a 403 Forbidden Error

A 403 Forbidden error means the server understands your request but refuses to fulfil it. Common causes: wrong file permissions, a missing index file, or a restrictive .htaccess rule.

Step 1 — Check File Permissions

Incorrect permissions are the most common cause.

1. Log into cPanel → File Manager
2. Navigate to public_html
3. Select all files and folders
4. Click Change Permissions

Correct permissions:

• Folders: 755
• Files: 644
• wp-config.php: 600

Step 2 — Check for a Missing Index File

If your public_html folder has no index.html, index.php, or index.htm file, the server may show a 403 instead of a directory listing.

1. Check that your homepage file is named exactly index.php or index.html
2. Ensure it is directly inside public_html (not in a subfolder)

Step 3 — Review Your .htaccess File

A misconfigured .htaccess can block access. Temporarily rename it to .htaccess_backup and test your site. If the 403 disappears, the issue is in your .htaccess.

Common problematic rules:

# This blocks all access — remove if present
deny from all

# This blocks specific IPs — check if your IP is listed
deny from 196.xxx.xxx.xxx

Step 4 — Check for IP Blocking

Your IP may have been blocked by our server's security system (ModSecurity or CSF Firewall) due to too many failed login attempts.

Contact our support team at +254 733 338 989 with your IP address (find it at whatismyip.com) and we will whitelist it.

Step 5 — Check Directory Index Settings

In cPanel → Advanced → Indexes, ensure your directory is set to Default System Setting or No Indexing (not Forbidden).