WordPress asks for FTP credentials when the PHP process cannot safely write to the site’s files. Your dashboard administrator role does not grant server-level filesystem access. The lasting fix is usually to correct ownership and group write access for the WordPress directories; use an FTP, FTPS, or SFTP connection when the host intentionally blocks direct PHP writes. Add FS_METHOD only when you understand the hosting layout and PHP already has safe write access.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
Why WordPress asks for FTP when you are already an administrator
WordPress separates two kinds of permission. Your WordPress user role controls actions inside the dashboard, such as installing a plugin or updating a theme. The operating system controls whether the PHP process can create, replace, or delete files. An administrator account cannot override Unix ownership, group membership, Windows ACLs, container mounts, or hosting security policies.
As an Amazon Associate I earn from qualifying purchases.
When an update or installation needs filesystem access, WordPress’s request_filesystem_credentials() function displays a form for connection details if it cannot establish a usable local method. Internally, the WP_Filesystem API checks the requested context and get_filesystem_method() selects a transport. The available method values are direct, ssh2, ftpext, and ftpsockets.
The prompt therefore means “the web server cannot write these files with the method currently available,” not “your WordPress login is insufficient.” It may appear during a core update, plugin or theme installation, plugin or theme update, or an attempt to write rewrite rules to .htaccess.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Start with a safe diagnosis
- Record the exact operation. Note whether the prompt appears for a WordPress core update, one plugin, every plugin, a theme, or a permalink save. A failure limited to one directory often points to different ownership or a read-only mount in that location.
- Back up before changing the server. Save a database backup, the
wp-contentdirectory, andwp-config.php. Keep a copy outside the web root. Permission or ownership changes can make a site unavailable if applied to the wrong path. - Identify the real installation path. Check the document root configured by the host, especially when WordPress is in a subdirectory, deployed through a container, or linked from a release directory. Changing permissions on an unused copy will not fix the live site.
- Check who runs PHP. Depending on the host, PHP may run as the site account, a shared web-server user, a pool-specific user, or a container user. The account that writes files must own them or belong to a group with write permission.
Fix ownership before changing WordPress settings
Ownership is the controlling issue in most cases. WordPress’s file-permissions guidance states that when WordPress runs as the FTP account, that account needs write access either by owning the files or by belonging to a group with write permission. The same principle applies when PHP runs as a separate service account.
What to inspect
- The WordPress root directory and its
wp-admin,wp-includes, andwp-contentchildren. wp-content/plugins,wp-content/themes, andwp-content/upgrade.- The temporary directory used during updates, if your host defines one.
.htaccessin the document root when the problem occurs after saving Permalinks.
On a Unix-like server, an administrator can inspect ownership and modes with a command such as:
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →ls -ld /path/to/wordpress /path/to/wordpress/wp-content
ls -l /path/to/wordpress/wp-content | headReplace the path with the actual document root. The output should let you compare the owner and group with the account used by the PHP-FPM pool or web server. If you cannot run shell commands, ask the host to perform this check rather than guessing an account name.
Use least-privilege permissions
A WordPress support case reports success with directories set to 755 and files to 644. Treat those numbers as a common starting point, not a universal prescription: the correct mode depends on the owner, group, hosting isolation, and whether a deployment process writes the files. A directory needs its execute bit to be traversable; a file needs write permission for the account that updates it.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Do not make the entire site world-writable to silence the prompt. Modes such as 777 allow any process running under the relevant web context to alter files and can turn a vulnerable plugin or compromised account into a site-wide modification path. If the PHP account and your deployment account differ, use a tightly scoped shared group or the host’s supported deployment mechanism instead.
When ownership cannot be changed by your account
Shared hosting often prevents customers from changing the owner of files created by a different service. In that case, send the host the exact paths and the PHP execution account, and request that they align ownership or group access. A managed WordPress hosting support team or a server administrator can repair this safely; changing random modes in the dashboard cannot substitute for a server-side ownership fix.
Recommended Free Tools
Test direct filesystem access without forcing it
After ownership and write access are corrected, retry one update or installation with no new filesystem constant. WordPress automatically selects the direct method only when its checks indicate that PHP can safely write to the requested location. Testing without an override tells you whether the underlying access problem is actually resolved.
If the operation succeeds, leave the configuration unchanged. If a previous override is present in wp-config.php, review it and remove it when it is no longer needed, after making a backup and retaining a way to restore the file.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
If it still fails, capture the complete error text and the path WordPress reports. A “permission denied” message suggests ownership or mode; a read-only filesystem, missing directory, quota error, or security policy requires the host to inspect the server rather than another dashboard setting.
Should you add define( 'FS_METHOD', 'direct' );?
FS_METHOD forces the filesystem method. Setting it to direct tells WordPress to use PHP file I/O instead of negotiating another transport. It can help on a correctly configured server where direct writes are available but method detection is choosing a different path. It does not grant PHP permission that the operating system has denied.
When a direct override is reasonable
- PHP already owns the WordPress files or has write access through the intended group.
- The host supports direct writes and has not disabled them as a security policy.
- You have confirmed that a stale or incorrect method setting is the reason WordPress is not using the available access.
- You can edit and restore
wp-config.phpsafely.
Place the constant before the line that says WordPress should stop editing the file, and preserve the existing PHP syntax:
define( 'FS_METHOD', 'direct' );WordPress cautions that forcing direct access can create security issues on poorly configured hosts. A web-server process with broad write access can alter executable PHP files if another vulnerability is exploited. The safer fix is to make ownership and write scope correct, then let WordPress choose the method.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
When not to force it
- The host deliberately blocks PHP writes and expects SFTP, FTPS, or another managed deployment route.
- Files are owned by a different account and you cannot align the owner or group.
- The installation uses read-only releases, symlinks, a container image, or a deployment pipeline that replaces files outside the web process.
- The prompt began after an earlier
FS_METHODedit and no one can explain why that edit was made.
WordPress recommends changing the constant only while troubleshooting update problems and reverting it if it does not help. Never leave a broad write workaround in place merely because it hides the prompt.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Choose the transport your host actually supports
If direct PHP writes are unavailable, use the transport supplied by the host. WordPress can work with four method values:
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →| Method | What it does | Use it when | Main caution |
|---|---|---|---|
direct |
PHP reads and writes files locally. | The PHP process has safe, correctly scoped write access. | Forcing it on a poorly configured host can expand the impact of a compromised process. |
ssh2 |
Uses the host’s SSH-based filesystem support. | The host provides SSH/SFTP credentials and the required PHP support. | Port, key authentication, and server policy must match the host’s instructions. |
ftpext |
Uses the PHP FTP extension. | The host enables the extension and supplies FTP or FTPS access. | Encryption and passive-mode requirements vary by host. |
ftpsockets |
Uses WordPress’s socket-based FTP implementation. | The host supports this fallback but not the PHP FTP extension. | It still requires valid server credentials and network access. |
Ask the host for the exact hostname, port, username, authentication type, and whether the connection must use FTP over TLS or SFTP. “FTP” is often used loosely by hosting panels, but FTPS and SFTP are different protocols; a password and port for one will not necessarily work for the other. WordPress notes that an FTP, FTPS, or SFTP client can be useful for larger or repeatable file-management tasks even when the dashboard prompt is resolved.
Do not paste credentials into public tickets or commit them to source control. The form retains entered connection details except the password, so verify what is stored and remove obsolete values after the maintenance task.
Configure nonstandard paths only when the layout requires it
Most installations do not need path constants. Symlinked deployments, a WordPress core directory outside the document root, or custom content and plugin locations may require:
define( 'FTP_BASE', '/absolute/path/to/wordpress/' );
define( 'FTP_CONTENT_DIR', '/absolute/path/to/wordpress/wp-content/' );
define( 'FTP_PLUGIN_DIR', '/absolute/path/to/wordpress/wp-content/plugins/' );Use absolute paths that exist on the server, with the trailing slash convention expected by the installation. Do not copy these examples unchanged. A wrong path can make WordPress connect successfully yet fail while looking for the target files. Confirm the layout with the host or deployment documentation before adding a constant.
Free tools Windows power users keep installed
One-click scans. No signup required.
Match the symptom to the likely cause
| Symptom | Most likely cause | Next action |
|---|---|---|
| The prompt appears for every plugin and theme. | PHP cannot write to wp-content, or an override selects an unavailable method. |
Check owner/group on wp-content, review FS_METHOD, then test one update. |
| Only one plugin or theme fails. | That directory has different ownership, mode, or a read-only mount. | Compare its owner and permissions with a working directory; ask the host about the mount. |
| Core updates fail but plugin updates work. | The root, update directory, or temporary directory is not writable. | Inspect the WordPress root and update paths rather than changing plugin permissions. |
| Saving Permalinks triggers the prompt. | .htaccess is absent, owned by another account, or not writable. |
Create or adjust the file through the host or grant only the required owner/group access. |
| The prompt remains after changing modes. | Ownership is wrong, PHP runs as another user, or the filesystem is read-only. | Identify the PHP account and have the host correct ownership or the mount policy. |
| Credentials are rejected immediately. | Wrong protocol, hostname, port, username, password, key, or passive/TLS requirement. | Use the host’s connection details and match FTP, FTPS, and SFTP exactly. |
| Connection works but files are “not found.” | WordPress is using the wrong base, content, or plugin path. | Verify the real layout and consider the path constants for a symlinked or custom install. |
A repeatable recovery procedure
- Put the site in a maintenance window if an update could briefly interrupt requests, and confirm that a recent backup can be restored.
- Write down the failing action and the exact error, including any path or method name.
- Check the owner and group of the WordPress root,
wp-content, plugins, themes, and update directories. Determine the PHP service account. - Correct ownership or group membership so the writing process has only the access it needs. Use restrictive, host-appropriate modes rather than blanket write access.
- Remove or temporarily disable an unexplained
FS_METHODoverride, then retry one small update without forcing a transport. - If direct access is intentionally unavailable, select the host-supported SSH2, FTPS, FTP-extension, or FTP-sockets route and enter credentials supplied by the host.
- For a custom or symlinked layout, verify
FTP_BASE,FTP_CONTENT_DIR, andFTP_PLUGIN_DIRbefore adding them. - After a successful test, remove temporary credentials, revert unnecessary constants, and review the changed files and server logs.
Security checks after the prompt disappears
- Confirm that only the intended WordPress directories are writable by the PHP process.
- Search
wp-config.phpand deployment files for forgotten passwords, private keys, or obsolete FTP constants. - Use encrypted transport when the host offers FTPS or SFTP; do not assume plain FTP protects credentials in transit.
- Check that the update completed and that the site is running the expected core, plugin, and theme versions.
- Review web-server and PHP logs if the error returns. Repeated ownership changes usually indicate a deployment job, restore process, container volume, or security tool is recreating files under the wrong account.
When the host must intervene
Contact the host when you lack permission to change ownership, the filesystem is mounted read-only, PHP runs under an account you cannot identify, quotas or inode limits are reported, SSH/FTP support is disabled, or a security module blocks writes despite correct ownership. Provide the site path, the failing operation, the PHP version and execution mode if known, and the complete error message. Ask for ownership repair or the supported file-transfer method instead of requesting a globally writable document root.
The prompt is resolved correctly when WordPress can update the requested files through a controlled method and the server’s ownership model still limits damage. Hiding the form with a constant or permissive mode, without fixing that model, only moves the failure or increases exposure.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
