What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

WordPress asks for FTP credentials when the PHP process cannot safely read, write, modify, or delete the files needed for an update or installation. Your administrator role does not grant server-level filesystem access. In most cases, the lasting fix is to correct ownership and group write access for the WordPress files. If the host deliberately blocks direct PHP writes, use the host-supported FTP, FTPS, or SSH/SFTP transport instead. Add FS_METHOD only when you understand why WordPress selected the wrong method; forcing direct is not a universal permissions fix.

What the FTP prompt means

The form is generated by WordPress’s request_filesystem_credentials() function. Before installing a plugin, updating a theme, replacing WordPress core files, or changing a file such as .htaccess, WordPress uses the WP_Filesystem API to determine how PHP should access the server filesystem.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Your dashboard administrator capability and the operating-system account running PHP are separate identities. An administrator can manage settings and users in WordPress while the web-server process is unable to write to wp-content. When WordPress detects that mismatch, it requests connection details for another filesystem transport rather than silently failing.

get_filesystem_method() evaluates the requested directory and available PHP extensions, then selects one of four methods:

#1 Best Overall
Sale
Compressed Air Duster,130000RPM Super Power Cordless Air Duster,Rechargeable Brushless Blower,3 Gear Adjustable Blower with LED Light,Dust Remover for Computer/House/Outdoor/Car
  • Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
  • With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
  • Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
  • Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
  • Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Method How it accesses files When it is appropriate
direct PHP reads and writes files through the local filesystem. The PHP/web-server account has safe ownership or group write access.
ssh2 WordPress connects through the SSH2 PHP extension, normally using an SFTP-capable SSH account. The host provides SSH access and the extension is enabled.
ftpext WordPress uses PHP’s FTP extension. The host enables the FTP extension and supplies FTP or FTPS access.
ftpsockets WordPress uses its socket-based FTP implementation. The FTP extension is unavailable but the host permits this fallback.

A FS_METHOD constant can override the method WordPress would otherwise choose. The prompt therefore indicates a filesystem-access or transport problem, not a missing WordPress role.

Which operation triggered the request?

Note the exact action that produced the form. The required directory and the likely cause vary by operation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Core update: WordPress must write temporary update files and replace files throughout the installation.
  • Plugin or theme installation: WordPress must create directories under wp-content and extract files there.
  • Plugin or theme update: Existing directories must be writable, and WordPress may need to remove the old version before moving the new one into place.
  • Permalink save: WordPress may be trying to update the root .htaccess file. Other updates can work even when this one file is not writable.

Knowing the operation prevents you from changing permissions across the entire server when only one path is misconfigured.

Prepare safely before changing access

  1. Back up the site and wp-config.php. Keep a database backup and a copy of the files before changing ownership, modes, or configuration constants.
  2. Record the current configuration. Check whether wp-config.php already defines FS_METHOD, FTP_BASE, FTP_CONTENT_DIR, or FTP_PLUGIN_DIR. A stale override can continue forcing an unsuitable method.
  3. Use one test operation. After each change, retry one small plugin or theme update rather than starting a full core upgrade. This makes the result and any new error easier to identify.
  4. Keep a recovery path. Have hosting-panel access, a file manager, SSH, or a support contact available before editing a production installation.

Fix ownership and write access first

WordPress’s Advanced Administration Handbook describes the controlling rule: when WordPress runs as the FTP account, that account must either own the files or belong to a group with write permission. The same principle applies to the PHP/web-server account. A numeric mode by itself cannot compensate for the wrong owner or group.

Rank #2
EVEO® Screen Cleaner Spray Kit (Streak-Free) TV Screen Cleaner for Smart TV, Lcd, LEd, Oled | Computer Screen Cleaner Spray and Wipe Microfiber Cloth - TV, Monitor, Laptop, iPad, Car - 6.7oz 1 Pack
  • Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
  • Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
  • Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
  • Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
  • Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth

Find the account that writes files

On shared hosting, the PHP process may run as your hosting account. On a managed or self-administered server, it may run as a web-server user such as the account configured for PHP-FPM or the web server. The correct identity is host-specific. Your hosting panel may show it; otherwise ask support which account PHP uses for this site.

Check the relevant paths

Inspect ownership and write permission for the WordPress root, wp-content, wp-content/plugins, wp-content/themes, and the update directory, commonly wp-content/upgrade. Also inspect the root .htaccess if only permalink changes fail. A file manager’s permissions and ownership view or an SSH listing can reveal whether these paths belong to a different system user.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use least-privilege modes

A WordPress support case reported success with directories set to 755 and files to 644. Those values are a useful starting point, not a universal prescription: hosting isolation, PHP execution mode, and group configuration determine what is safe and functional. The required result is that the writing process has access through ownership or an explicitly writable group while unrelated users do not gain write access.

  • Do not make the whole installation world-writable to silence the prompt.
  • Do not change ownership recursively without knowing which account should own the site; doing so can break deployments, backups, or the hosting panel.
  • Make sure the directory itself is writable. A writable file inside a non-writable directory still prevents creation, replacement, or deletion.

Ask the host to repair server-side ownership when necessary

Many shared accounts cannot change an owner or group themselves. If the site was migrated, restored from a backup, or deployed by a different account, ask the host to align ownership for the WordPress root and its content directories with the PHP account, or to configure a group that PHP can write to. This is safer than granting broad permissions and is often the only correct fix on managed infrastructure.

Rank #3
Sale
BladeHawks RGB Gaming Mouse Pad Extra Large Extended 31.5x12 Inch-Black | LED mouse pad with 14 lighting modes, covers keyboard & mouse, anti-slip rubber base, waterproof surface, USB powered
  • 【Large size】:Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
  • 【LED backlight mouse pad】:Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
  • 【Anti-slip rubber base】:Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
  • 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
  • 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.

Test direct access without forcing a method

Once ownership and permissions are corrected, remove an unnecessary FS_METHOD override and test the original operation. When no override is present, WordPress selects direct only when its checks show that PHP can safely write to the requested location.

If the update succeeds, leave the transport selection alone. A host can change PHP handlers or extensions later, and a hard-coded method may become wrong after that change. If the prompt remains, inspect the exact error and the ownership of the specific directory involved rather than repeatedly changing modes.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When FS_METHOD = direct is appropriate

You may see this line suggested in troubleshooting articles:

define( 'FS_METHOD', 'direct' );

It tells WordPress to force local PHP file I/O. Use it only when PHP genuinely has safe write access and the host’s automatic detection is selecting another method incorrectly. WordPress’s handbook warns that forcing direct access can create security issues on poorly configured hosts, because a vulnerable PHP process could write to files that should not be writable.

Rank #4
Sale
Vaydeer Wrist Rest for Keyboard and Mouse, Computer Ergonomic Wrist Support Pad, Soft Memory Foam Arm Cushion for Desk, Palm Hand Office Laptop Typing
  • 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
  • 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
  • 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
  • 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
  • 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.

Safe decision process

  1. Confirm the PHP account owns the files or has write access through the intended group.
  2. Check that the host permits direct PHP writes and does not require an FTP or SSH boundary for file changes.
  3. Review whether an existing constant is forcing ssh2, ftpext, or ftpsockets unnecessarily.
  4. Add the constant in wp-config.php only if the host or a documented configuration issue requires it.
  5. Retry one update. If it does not help, remove the constant rather than leaving an ineffective override in production.

Never use direct as a substitute for correcting ownership, and do not assume it will bypass filesystem restrictions imposed by the operating system or hosting platform.

Use FTP, FTPS, or SSH/SFTP when direct writes are blocked

Some hosts intentionally prevent PHP from modifying application files. In that environment, the FTP form is the expected workflow. Obtain the connection details from the host instead of guessing them:

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Hostname: the server name supplied for file access, which may differ from the public website address.
  • Port: the host’s port for FTP, explicit FTPS, implicit FTPS, or SSH.
  • Username: the account permitted to access the WordPress directory.
  • Authentication: a password or, for SSH/SFTP, the key-based method required by the host.
  • Remote path: the directory containing the WordPress root if the account opens somewhere else.

WordPress’s four method names do not map perfectly to every product label. ssh2 generally means an SSH-based connection with SFTP capability; ftpext uses the PHP FTP extension; ftpsockets is the socket fallback. Ask the host which of these is supported and which encryption mode is required. Prefer encrypted FTP (FTPS) or SSH/SFTP when available, and do not paste credentials into an untrusted support channel.

The credentials form does not retain the password after submission, according to the behavior of request_filesystem_credentials(). For repeated or large file-management jobs, WordPress notes that a dedicated FTP/FTPS/SFTP client can be more practical than entering details in the dashboard each time. Store its credentials in the client’s protected credential store, not in publicly accessible files.

Best Value
Sale
Under Desk Cable Management Tray No Drill, Metal Mesh Cable Management Under Desk with Clamp Mount, 2 Hole Cable Tray with Wire Management and Cord Organizer for Home Office Standing Desk
  • 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
  • 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
  • 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
  • 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
  • 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Correct custom paths and symlinked installations

Standard layouts are not the only reason detection can fail. A deployment may place the WordPress core, content directory, and plugins in different locations, or expose them through symlinks. In those cases WordPress may test one path while the FTP account starts in another.

Review these constants only when the host or the installation’s layout requires them:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • FTP_BASE identifies the WordPress base directory for the FTP connection.
  • FTP_CONTENT_DIR identifies the content directory.
  • FTP_PLUGIN_DIR identifies the plugin directory.

Use the actual absolute paths supplied by the host or deployment documentation. Incorrect values can make a valid account appear unable to find WordPress files. If the installation uses symlinks, ask the host whether the connection account can traverse the target directories and whether ownership is applied to the target rather than only to the link.

Diagnose a prompt that persists after permission changes

Symptom Likely cause Next check
The prompt appears for every plugin and theme action. PHP cannot write to wp-content, or a forced transport is invalid. Check the PHP account’s ownership/group access and review FS_METHOD.
Only a new plugin installation fails. The plugins directory or temporary upgrade directory is not writable. Inspect wp-content/plugins and wp-content/upgrade.
Updates fail but the dashboard otherwise works. File replacement or deletion is blocked even though reads succeed. Check directory write and delete permission, not just individual file readability.
Only “Save Changes” for permalinks requests FTP. The root .htaccess is absent, owned by another account, or not writable. Check its ownership and the web server’s rewrite configuration; ask the host if it must be edited manually.
FTP credentials are accepted but WordPress still cannot update. The account opens in the wrong remote directory or lacks permission on the target path. Verify the remote path and the FTP_BASE, FTP_CONTENT_DIR, and FTP_PLUGIN_DIR values.
The prompt started after a migration or restore. Files retain ownership from the old server or backup process. Have the host realign ownership and group membership for the current PHP account.
The prompt began after a PHP or hosting change. The new handler runs as a different account or no longer has the required extension. Ask which PHP account and filesystem transport are now active.

After each correction, retry one operation and read the complete error message. A transport error, a permission-denied error, and a missing-path error require different fixes; treating them all as a request to loosen permissions can make the site less secure without solving the problem.

Configuration and security mistakes to avoid

  • Do not set permissions to 777. World-writable files allow any process running under the relevant isolation boundary to alter them and can turn a vulnerability into a site compromise.
  • Do not leave a forced method without a reason. A constant that helped on one server may fail after a host migration or PHP-handler change.
  • Do not store FTP passwords in publicly readable configuration files. If a host requires constants for a nonstandard connection, protect the file and follow the host’s credential guidance; remove temporary credentials after the task.
  • Do not recursively change every file just because one directory fails. Limit the correction to the paths required by the operation.
  • Do not confuse a successful login with write permission. An FTP account can authenticate and still be restricted from replacing files or traversing the WordPress directory.

A complete recovery sequence

  1. Identify whether the failure involves core, plugin, theme, or permalink files.
  2. Back up the database, files, and wp-config.php.
  3. Inspect existing filesystem and path constants.
  4. Determine which account runs PHP for this site.
  5. Check ownership and write access on the WordPress root and the directory used by the failed operation.
  6. Have the host repair ownership or group membership if your account cannot do so.
  7. Remove an obsolete FS_METHOD override and test automatic selection when direct writes should be allowed.
  8. If direct writes are prohibited, configure the host-supported ssh2, ftpext, or ftpsockets transport with the supplied host, port, account, and authentication details.
  9. For custom or symlinked layouts, verify the three FTP path constants against the real remote paths.
  10. Retry one update, record the exact result, and restore the backup if a configuration change causes a new failure.
  11. Remove temporary access changes and confirm that no broad write permissions or exposed credentials remain.

When to contact hosting support

Contact the host when you cannot identify the PHP account, cannot change ownership, do not know which transport or port is enabled, or see permission errors after the paths appear correct. Provide the failed operation, the exact error text, the affected directory, and whether the site was recently migrated or restored. Ask for “WordPress file ownership help” or managed WordPress hosting support and request a least-privilege correction rather than a blanket writable setting.

The host should be able to confirm the PHP execution account, repair owner/group settings, enable or identify the supported SSH/FTP extension, and tell you whether .htaccess must be edited outside WordPress. That information resolves the underlying server mismatch instead of hiding it behind a permanent FTP prompt.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Bottom line

The FTP form appears because WordPress cannot use a permitted filesystem method for the files it needs to change. Correct ownership and group write access first, keep permissions restrictive, and let WordPress choose direct when the server is configured for it. If the host requires an external transport, use its encrypted FTP or SSH/SFTP details. Treat FS_METHOD as a narrowly targeted setting, verify custom paths in nonstandard installations, and remove temporary workarounds after the update succeeds.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.