403 Forbidden
The server understood the request but refuses to authorize it.
Definition (RFC 9110)
HTTP status code 403 403 Forbidden is defined in RFC 9110 (HTTP Semantics), Section 15.5.4 — the current authoritative specification for HTTP semantics, published June 2022, which obsoletes the older RFC 7231 and RFC 2616.
Description
The 403 Forbidden status code indicates that the server understood the request but refuses to authorize it. Unlike 401, re-authenticating will not help — the server has decided this client does not have permission.
Common Causes
- Insufficient permissions for the resource
- IP address blocked
- Geo-restriction
- Directory listing disabled
- File permissions too restrictive
- WAF blocking the request
How to Fix
- Check file/directory permissions (644 for files, 755 for directories)
- Verify user role has required permissions
- Check .htaccess for access restrictions
- Review WAF/firewall rules
- Check IP whitelist/blacklist
Check your website's HTTP status code
Check now →