This guide covers file permission rules, Apache and Nginx configuration, security hardening, cron and maintenance for self-hosted WordPress.
1. File & Folder Permissions (Base Security)
Never use 777 globally, it is extremely unsafe.
- Regular folders: 755
- PHP, CSS, JS, HTML files: 644
- Folders requiring write permission (only these):wp-content/uploads/, wp-content/cache/, wp-content/wflogs/ (if using Wordfence)Set writable folders to 755.
- Critical folders must stay…