JustUtils
shield_lockLinux permissions 路 explained as you click

Chmod 644 Explained & Calculator

Understand chmod 644 in plain English, see who can read or write the file, and copy a complete chmod command.

STEP 1

What are you changing?

Execute means different things for a file and a directory.

For a file: Read opens the contents, Write changes them, and Execute runs the file as a program.

STEP 2

Choose access

Owner permissions

Owner

digit 1 路 6

rw-

Usually you or the account that created it.

Group permissions

Group

digit 2 路 4

r--

Accounts collected in the file's owning group.

Everyone else permissions

Everyone else

digit 3 路 4

r--

Any other account on the same system.

YOUR RESULT

644rw-r--r--

u=rw,g=r,o=r

Owner

Can read, edit

Group

Can read

Everyone else

Can read

THE PART MOST CALCULATORS SKIP

See what will actually change

Find the numeric mode with stat -c '%a' path on Linux, then review each permission being added or removed.

644arrow_forward644

check_circleNo permission changes.

TOP 5 EVERYDAY MODES

Start from the job, not the digits

Each common mode has its own explainer page and loads directly into this calculator. Pick the situation that sounds like yours, then check the access before copying.

folder_open755

Public directory or script

You control it; everyone else can open or run it.

description644

Regular file

You can edit it; everyone else can read it.

key600

Private or secret file

Only you can read or edit it.

lock700

Private directory or script

Only you can open, change, or run it.

group775

Team directory

You and your group can edit; everyone else can browse.

CHMOD IN ONE MINUTE

What is chmod?

Every Linux file carries a tiny access list. chmod is the command that rewrites that list. It does not move the file, change its contents, or choose its owner鈥攊t only changes what the owner, group, and everyone else are allowed to do.

Think of the three digits as three keycards. The first card belongs to the owner, the second to the group, and the third to everyone else. Each card gets points for Read (4), Write (2), and Execute (1). Add the allowed actions to get that card's digit.

The only math you need

4Read+2Write+1Execute=7all three
Why 777 is not a universal fix: it hands every keycard every permission. Fix ownership or choose the smallest access that solves the real need instead.

DIGIT 1 路 u

Owner

Usually you or the account that created it.

DIGIT 2 路 g

Group

Accounts collected in the file's owning group.

DIGIT 3 路 o

Everyone else

Any other account on the same system.

Chmod 644 in practice

How to decide whether 644 fits your file

Mode 644 gives the owner read and write access, while the group and everyone else can only read. It is a common mode for ordinary non-secret files because one account can maintain the content without granting write access broadly.

Owner
6 = read + write
The owning account can open and change the file but does not receive execute permission.
Group
4 = read
Members of the owning group can read the file but cannot modify it.
Everyone else
4 = read
Other local accounts can read the file when every parent directory also permits traversal.

A practical example

A static HTML file served by a web server

The deployment account owns index.html and needs to update it. The web-server process only needs to read it. Mode 644 is often enough for the file itself, provided the server can enter each parent directory and no access-control rule blocks it.

Before saving the change

  • Confirm the file contains no passwords, private keys, or environment secrets.
  • Check the owner with ls -l so write access belongs to the expected account.
  • Verify parent directory permissions; a readable file can still be unreachable.

Common mistake to avoid

A readable configuration file may expose secrets to every local account. The familiar 644 default is not a safe choice merely because the file is called config.

When to choose something else

Choose 600 for private keys, token files, and secret environment files. Choose 664 only when the owning group must edit the file and group membership is controlled.