What chmod 644 means
| Class | Digit | Permissions |
|---|---|---|
| Owner | 6 | read and write |
| Group | 4 | read |
| Others | 4 | read |
The standard for regular files such as web content and config: everyone can read, only the owner can write.
chmod 644 file.txt # one file
find /var/www -type f -exec chmod 644 {} + # all files in a treeHow octal permissions work
Each digit is the sum of read (4), write (2) and execute (1) for owner, group and others. So 7 = 4+2+1 = rwx, 5 = 4+1 = r-x, 4 = r--. An optional leading digit sets special bits: setuid (4), setgid (2) and sticky (1) — e.g. 1777 is /tmp.
Safe defaults for web servers
- Directories: 755
- Files: 644
- Secrets (.env, SSH keys): 600
- Laravel
storage/andbootstrap/cache/: 775 with the web server group — never 777.