LightAtom

403 Forbidden: What It Means and How to Fix It

The server understood your request but refuses to give you access, because of permissions, missing authentication, or a firewall or region block.

403 Forbidden

The server knows what you asked for but won't let you have it. Logging in won't help unless the page needs a different account or permission.

Quick checks

  • Check the address: a missing filename or a trailing slash can point at a folder you can't list.
  • Log in if the page requires an account.
  • Disconnect any VPN: sites often block VPN and data-center IP addresses.

If you’re visiting the site

  1. Rule out blocks on your connection

    1. Turn off the VPN or proxy and reload; try mobile data.
    2. Clear the site's cookies and log in again.
    3. If the site is region-restricted, the 403 is deliberate.

If you run the site

  1. Check file permissions and ownership

    1. The web server user must be able to read files (usually 644) and enter folders (755).

  2. Check for a missing index file

    1. Requesting a folder without index.html (or index.php) returns 403 when directory listing is off. Add the index file or fix the link.

  3. Check access rules and firewalls

    1. Look for deny rules in nginx, Require lines in Apache config or .htaccess, and WAF or CDN rules (country blocks, bot rules).
    2. On S3 or other object storage, check the bucket policy and object ACLs.

Still not working?

If you should have access and the steps above don't help, contact the site's support with your IP address (run curl -s https://api.ipify.org in Terminal) and the time; they can check their firewall logs.

See what’s happening

LightAtom's connections view shows whether your browser connects to a proxy address instead of the site's servers, and which process runs that proxy.

Frequently asked questions

What is the difference between 401 and 403?

401 means you're not authenticated: log in and try again. 403 means the server knows who you are (or doesn't care) and still refuses.

Why do I get 403 Forbidden on a site that works for others?

Your IP address may be blocked: VPNs, data-center addresses and some countries are common targets. Try without the VPN or on another network.

How do I fix 403 Forbidden on my website?

Check file permissions (644 for files, 755 for folders), make sure an index file exists, and review deny rules in the server config, .htaccess and your CDN or WAF.

Can a browser extension cause 403?

Rarely, by changing headers or blocking cookies the site needs. Test in a private window without extensions.

Related errors and tools

Related

LightAtom team

The people who build LightAtom, a network monitor for macOS.