403 Forbidden means the website's server is working and understood your request, but refuses to show you the page. Unlike a 404, the page may exist; you're just not allowed to see it.
Common reasons are a page that needs you to be logged in, a security service blocking your IP address or VPN, or a misconfigured website.
Fixes for visitors
- Check the address; folder addresses without a page often return 403.
- Log in if the page is for members or account holders.
- Turn off your VPN or proxy. Many sites block VPN and data-centre IP addresses.
- Clear cookies for the site, or try a private window.
- Restart your router to get a new IP address if yours was blocked.
- Wait a while if you were blocked after many fast requests; these blocks are often temporary.
Does a 403 mean the site is down?
No. A 403 proves the server is up and answering. That's why our own checks count a 403 as "up". If you can't reach a site you rely on, check its page in our status list to see whether others are reporting problems.
If you own the website
- Check file and folder permissions (commonly 644 for files and 755 for folders on Linux hosts).
- Check for an index file in the folder, or a rule in
.htaccessor your server config that denies access. - Check your firewall, CDN or security plugin for rules blocking legitimate visitors or whole countries.
Questions
What is the difference between 403 and 404?
A 404 means the page wasn't found. A 403 means the server found it, or at least understood the request, but won't let you see it.
Can a VPN cause a 403 Forbidden error?
Yes. Many websites block VPN and data-centre IP addresses. Turn the VPN off and try again.