Website shows 403 Forbidden

The server understood the request but refuses to authorize it. Permissions, login state, region, IP reputation, security rules, or a private resource can produce HTTP 403.

Model check required. HTTP status meaning is standard, but the operational cause depends on the website, CDN, gateway, application, and account context.

Reviewed Jul 17, 20265 minute guideWebsiteWebsites and web APIs

Quick answer

The server understood the request but refuses to authorize it. Permissions, login state, region, IP reputation, security rules, or a private resource can produce HTTP 403.

Start here: Confirm the URL and sign in again. Use the site home page rather than a bookmarked protected path.

Guided check

Match the symptom, then work through the safe checks.

0/4 checked

1. What best matches what you observe?

2. Complete only the checks that are safe for you.

Confirm the URL and sign in againUse the site home page rather than a bookmarked protected path.SafeTry without VPN or proxySome sites block shared or unusual IP addresses.CautionClear only that site’s cookiesA stale session can preserve a denied state.SafeIf you own the site, inspect access rulesCheck server, CDN, storage, and file permissions.Caution

4 user-level checks are available in this guide.Stop immediately if any warning condition applies.

Show stop conditions

The page handles payment or identity and you cannot confirm whether an action completed
The site redirects to an unexpected domain or asks for sensitive information

Likely causes

The page requires an account or permission
A security rule blocks the IP, region, browser, or request
The URL points to a protected file or directory
The website permissions are misconfigured

Quick checks, in order

Confirm the URL and sign in again

Use the site home page rather than a bookmarked protected path.

safe

Try without VPN or proxy

Some sites block shared or unusual IP addresses.

caution

Clear only that site’s cookies

A stale session can preserve a denied state.

safe

If you own the site, inspect access rules

Check server, CDN, storage, and file permissions.

caution

Where does the HTTP error appear?

Only one page is forbidden

That resource may be private, moved, or permission-restricted.

The whole site is forbidden

A firewall, region, IP, account, or server rule may block access.

It works on another network

The original IP, proxy, or network policy is likely involved.

Stop and get qualified help when

Do not continue troubleshooting if any of these apply:

The page handles payment or identity and you cannot confirm whether an action completed
The site redirects to an unexpected domain or asks for sensitive information

Official support and model manuals

Use the full model number from the rating label. The manufacturer manual is the deciding reference when codes differ by region or product family.

MDN Web Docs: HTTP response status codes

Frequently asked questions

What does HTTP 403 mean?

The server understood the request but refuses to authorize it.

Is this usually a browser problem?

Usually not. Browser state can contribute in some cases, but gateway, server, permission, rate-limit, or upstream conditions are common.

Did this guide move you closer to a solution?The response is stored on this device and sent to aggregate analytics.