Skip to content
4xx · Client Error

403 Forbidden

The server understood the request but refuses to authorize it.

What it means

HTTP 403 Forbidden means the server recognizes the request but will not fulfil it. Unlike 401, authenticating will not help — the client simply does not have permission to access the resource.

When it happens

It happens with incorrect file permissions, IP or geo blocking, a missing index file in a directory, firewall or WAF rules, or a CDN blocking a bot it considers suspicious.

How to fix it

  • Check file and directory permissions on the server (for example, 644 for files, 755 for directories).
  • Review .htaccess, firewall, and WAF rules that may be blocking the request.
  • Whitelist legitimate search engine crawlers if a CDN or security layer is blocking them.
  • Ensure an index document exists if directory listing is disabled.

SEO impact

Harmful when it blocks crawlers. If Googlebot receives 403 on pages you want indexed, those pages drop out of the index. Verify security rules and CDNs are not blocking legitimate crawlers.

Check it with Sitewell

Find out which of your URLs return 403

Paste a list of URLs and Sitewell checks the status code of every one at once — free and without signup.

Related codes

Related guides