Are you trying to upload a file to your WordPress Media Library only to be met with a message telling you “Sorry, this file type is not permitted for security reasons” and/or “[filename] has failed to upload”?
As the message implies, WordPress limits the types of files that you can upload to your site for security reasons. However, by adding a small code snippet to your site’s wp-config.php file or using a free plugin, you can manually expand the list of allowed file types so that you’re able to upload any type of file.
Here’s what you’ll learn in this article:
- More about the “Sorry, this file type is not permitted for security reasons” message
- How to fix the “Sorry, this file type is not permitted for security reasons” message in WordPress
What Triggers the “Sorry, this file type is not permitted for security reasons” Message?
As we explained above, WordPress’ default configuration limits the types of files that you can upload to your site for security reasons.
The "Sorry, This File Type Is Not Permitted for Security Reasons" Error Message in WordPress:
You get the “Sorry, This File Type Is Not Permitted for Security Reasons” error message when you try to upload a file type that’s not supported in WordPress by default.
WordPress limits the file types you can upload through your site’s admin — images, videos, documents, audio — for security reasons.
By default, the file types that you can upload are:
- .ppt, .pptx, .pps, .ppsx
- .xls, .xlsx
If you’re trying to upload a file type that’s not on the list above, you’re likely going to run into the “Sorry, this file type is not permitted for security reasons” error. Or, you’ll also see it as “[filename] has failed to upload”.
For example, if you’re trying to use your own custom fonts on your WordPress site, you might be trying to upload a custom font file to WordPress in the .tff and/or .woff formats. Because those formats are not allowed by default, WordPress will show you the “Sorry, this file type is not permitted for security reasons” error instead of letting you upload them.
Here’s an example where we tried to upload a .woff file to our test site:
How to Fix the “Sorry, this file type is not permitted for security reasons” Error in WordPress
Below, we’ll show you two ways how to fix the “Sorry, this file type is not permitted for security reasons” error in WordPress:
- By editing your site’s wp-config.php file
- By using a free WordPress plugin
1. Add New Permitted File Types Using wp-config.php
WordPress includes an ALLOW_UNFILTERED_UPLOADS option that you can enable in your site’s wp-config.php file. Once enabled, you’ll be able to upload any file type to your WordPress Media Library.
Here’s how to set it up – but first, because you’ll be editing your wp-config.php file, we’d recommend backing up your site before proceeding.
To get started, connect to your WordPress site via FTP/SFTP. Your site’s wp-config.php file is located in the root folder, which is the same folder that has the wp-admin and wp-includes folders.
Right-click to edit the file, or download it to your computer:
Then, while editing the wp-config.php file, add the following code snippet above the /* That’s all, stop editing! Happy blogging. */ line:
Make sure to save your changes and re-upload the file if needed.
Struggling with downtime and WordPress issues? Kinsta is the hosting solution designed with performance and security in mind! Check out our plans
To finish the process, you’ll need to go to your WordPress dashboard and log out of your WordPress account. Then, you can immediately log back in.
After you’ve logged out/in, you should be able to upload any file without triggering the error message:
2. Use the Free WP Extra File Types Plugin
If you’d prefer not to edit your wp-config.php file and/or you want more control over exactly which file types can be uploaded to your site, you can use the free WP Extra File Types plugin at WordPress.org
Once you install and activate the plugin, go to Settings → Extra File Types in your WordPress dashboard.
There, you’ll see a lengthy list of file types. Check the box next to the file type(s) that you want to be able to upload and then click Save Changes at the bottom:
If you don’t see the file type that you’d like to upload on the list, you can also add your own custom file types at the bottom of the plugin’s settings list:
In some instances, there may be better alternative plugins to enable specific file types. For example, in our tutorial on how to enable SVGs in WordPress, we recommend the free Safe SVG plugin. This not only enables the SVG filetype in the WordPress media library, it also sanitizes them upon upload.
By default, WordPress limits the file types that you can upload to your site for security reasons. If you try to upload a file type outside this list of default file types, you’ll see the “Sorry, this file type is not permitted for security reasons.” message.
One way to fix the issue is to edit your wp-config.php file and add the ALLOW_UNFILTERED_UPLOADS code snippet to allow unfiltered uploads. Or, you can also use the free WP Extra File Types plugin to control allowed file types from your WordPress dashboard.
Finally, if, after allowing new file types, you still can’t upload your file because of its size, you might want to check out our additional guides on:
- How to Increase the WordPress Maximum Upload File Size
- How to Fix the uploaded file exceeds the upload_max_filesize directive in php.ini Error
And don’t forget, you could also upload the file via SFTP if needed.