Skip to content
← All Status Codes
403
Client Error

403 Forbidden

The server understood the request but refuses to authorize it.

Definition (RFC 9110)

HTTP status code 403 403 Forbidden is defined in RFC 9110 (HTTP Semantics), Section 15.5.4 — the current authoritative specification for HTTP semantics, published June 2022, which obsoletes the older RFC 7231 and RFC 2616.

Description

The 403 Forbidden status code indicates that the server understood the request but refuses to authorize it. Unlike 401, re-authenticating will not help — the server has decided this client does not have permission.

Common Causes

  • Insufficient permissions for the resource
  • IP address blocked
  • Geo-restriction
  • Directory listing disabled
  • File permissions too restrictive
  • WAF blocking the request

How to Fix

  • Check file/directory permissions (644 for files, 755 for directories)
  • Verify user role has required permissions
  • Check .htaccess for access restrictions
  • Review WAF/firewall rules
  • Check IP whitelist/blacklist

Check your website's HTTP status code

Check now →

Related Status Codes

Automate this check

Set up continuous monitoring and get an alert when something breaks. No manual runs to remember.