What does a 403 Forbidden error mean?
A 403 Forbidden error means the server is working and received your request, but it has decided not to let you have the page. That is different from a 404, where the page does not exist, and from a 5xx error, where the server itself is struggling.
Common causes
- You are not allowed to see that page. Some pages are for signed-in users, staff or members only.
- Your network or country is blocked. Websites sometimes refuse traffic from certain countries, hosting providers, VPNs or shared networks that have caused trouble before.
- A security filter flagged the request. Firewalls and bot protection can block a visitor who looks like an automated program. A browser with unusual settings, extensions or a very old version can trigger this.
- Wrong permissions on the server. If you run the site, a file or folder may be set so the web server cannot read it. This is a very common cause for new sites.
- A missing index file. If a folder has no default page and directory listing is switched off, many servers answer 403.
What visitors can try
- Reload the page, then check the address for typing mistakes.
- Sign in if the page belongs to an account area.
- Turn off any VPN or proxy and try again. Then try mobile data instead of Wi-Fi.
- Clear the site’s cookies and cache, which can remove a stale login that causes the refusal.
- If the page works for other people, it is probably something about your network. Contact the site’s support and tell them roughly when it happened.
What site owners should check
- File permissions: folders are usually 755 and files 644.
- That the folder has an index file such as
index.htmlorindex.php. - Firewall, security plugin and CDN rules that might be blocking legitimate visitors or tools.
- Any country or IP blocks you have set up.
403 and uptime checks
Many large websites answer automated checks with a 403 on purpose, even when they work perfectly for people. When our server gets a 403 we do not call the site down. We report that it blocks automated checks, because a refusal is not an outage. See Why some sites block automated checks.
Check a website now
Is it down for everyone, or just you? Paste an address and we test it from fifteen places.
Open the checkerRelated guides
- HTTP status codes explained: what 200, 301, 404 and 503 mean
- Why a website can be down for some people and not others
- Website not loading? A step-by-step checklist
Last updated 2 November 2026. Written by the siteupdown.com team. Spotted a mistake?