600 is the most secure setting, allowing only the file owner to read and write. 644 is the default setting, which allows the file owner to read and write while making it also readable for others.
Since you have your own hosting, leaving it at 644 works. However, if you’re looking for better security and have full control over the server, 600 is safer.
Thread Starter
janyx
(@janyx)
I’ve never dealt with this, but it would be safer to set the value to 400
Remember: there are also plugins that write to the file. E.g. to store license codes or hashes. Some also need to be updated from time to time. 400 would prevent this, which would make it impossible to use some plugins. Or you would have additional manual work.
Basically, the lowest number that works is probably better. 😀
