TechCompare LogoTechCompare

What does chmod 755 mean? Directory permissions, script execution, and security

755 is the correct default for directories and executable scripts. It balances usability and security. If you're ever unsure what permissions to set, start at 755 for directories and 644 for files, then tighten from there.

chmod 755 sets permissions to rwxr-xr-x: the owner can read, write, and execute, while the group and everyone else can read and execute but not modify. This is the default permission for directories and executable scripts on every Unix-like system, and for good reason: it lets the owner manage files while letting everyone else use them safely.

By TechCompare · Updated

Octal
755
chmod 755
Symbolic
rwxr-xr-x
Owner / Group / Others
Category
Common Permissions
Standard permissions

How this is calculated

In octal, 7 = 4+2+1 (read+write+execute) and 5 = 4+0+1 (read+execute). The three digits apply to owner, group, and others in that order. 755 is safe for most use cases because it prevents accidental modification by other users while still letting them access the files. For web servers, 755 on directories and 644 on files is the standard deployment baseline. Never use 777 unless you have a very specific reason and understand that any user on the system can modify or delete those files.

Verdict

The octal math breaks down to 7 (4+2+1, read+write+execute) for the owner and 5 (4+0+1, read+execute) for group and others, which is exactly what directories and executable scripts need: the owner manages, everyone else can navigate or run. The execute bit on directories isn't really 'execution', it's 'permission to enter and look up files inside', which is why stripped-down 644 directories leave users unable to even cd into them. On web-server document roots the canonical pairing is 755 for directories and 644 for the files inside, with the web-server user (www-data, nginx) landing in the 'others' bucket so it can read and serve without ever being able to write.

More CHMOD scenarios

Frequently asked questions

When should I use chmod 755 vs 644?
Use 755 for directories (need execute to enter) and scripts/binaries (need execute to run). Use 644 for static files like HTML, CSS, images, and config files that should be readable but not executable.
How do I set 755 permissions recursively on a directory?
Run `chmod -R 755 /path/to/dir`. The `-R` flag applies the change to the directory and everything inside it. Be careful with recursive chmod: it sets the same mode on every file, including private keys and binaries that need different permissions. Use `find /path -type d -exec chmod 755 {} +` for directories only.
Is chmod 755 the right permission for a public web directory like /var/www/html?
Yes for the directories, paired with chmod 644 for the files. The web server user (www-data on Debian/Ubuntu, nginx on some distros) can read and execute but doesn't need write. The owner (root or the deploy user) has full access. This is the standard baseline for any web server document root.