chmod 640 meaning

640 rw-r-----

The owner can read and write, the group can read and everyone else can do nothing.

When to use 640

Config files the web server group must read but others must not, for example a .env file read by the www-data group.

What each digit allows

Read = 4, write = 2, execute = 1. Each digit is the sum for one group of users.

Who	Digit	Symbolic	Read	Write	Execute
Owner (u)	6	rw-	Yes	Yes	No
Group (g)	4	r--	Yes	No	No
Others (o)	0	---	No	No	No

On a folder, read lists its contents, write adds or deletes files in it, and execute lets you open it (cd into it).

Commands

One file or folder, a folder with everything inside it, or only the files inside a folder:

chmod 640 file.php
chmod -R 640 folder/
find folder/ -type f -exec chmod 640 {} +

In cPanel: File Manager → right-click → Change Permissions, and tick the boxes until the number shows 640.

Try other permissions

Tick or untick the boxes to see the number, the symbolic form and the command.

	Read	Write	Execute
Owner
Group
Everyone else

Special bits (setuid, setgid, sticky)

setuid setgid sticky

Common values

Octal

Symbolic

Command

-R

Compare

Frequently asked questions

What does chmod 640 mean?

Each digit is the sum of read (4), write (2) and execute (1), for the owner, the group and everyone else. 640 = 6 / 4 / 0, so the owner can read and write, the group can read and everyone else can do nothing (rw-r-----).

Should I use 640 for files or for folders?

640 suits files. A folder needs execute before anyone can open it, so folders usually get 755 (or 775 when your group must write).

How do I set 640 in cPanel?

In File Manager, right-click the file or folder, choose Change Permissions, and tick the boxes so the number shows 640. Over SSH: chmod 640 path (add -R to include everything inside a folder).