How to Fix “Sorry, This File Type Is Not Permitted for Security Reasons” Error in WordPress Print

Are you trying to upload a file to your WordPress Media Library only to be met with a message telling you “Sorry, this file type is not permitted for security reasons” and/or “[filename] has failed to upload”?

As the message implies, WordPress limits the types of files that you can upload to your site for security reasons. However, by adding a small code snippet to your site’s wp-config.php file or using a free plugin, you can manually expand the list of allowed file types so that you’re able to upload any type of file.

What Triggers the “Sorry, this file type is not permitted for security reasons” Message?

As we explained above, WordPress‘ default configuration limits the types of files that you can upload to your site for security reasons.

By default, the file types that you can upload are:

Images:

• .jpg
• .jpeg
• .png
• .gif
• .ico

(Suggested reading: JPG vs JPEG: Understanding the Most Common Image File Format)

Videos:

• .mp4
• .m4v
• .mov
• .wmv
• .avi
• .mpg
• .ogv
• .3gp
• .3g2

Documents:

• .pdf
• .doc
• .ppt, .pptx, .pps, .ppsx
• .odt
• .xls, .xlsx
• .psd

Audio:

• .mp3
• .m4a
• .ogg
• .wav

If you’re trying to upload a file type that’s not on the list above, you’re likely going to run into the “Sorry, this file type is not permitted for security reasons” error. Or, you’ll also see it as “[filename] has failed to upload”.

For example, if you’re trying to use your own custom fonts on your WordPress site, you might be trying to upload a custom font file to WordPress in the .tff and/or .woff formats. Because those formats are not allowed by default, WordPress will show you the “Sorry, this file type is not permitted for security reasons” error instead of letting you upload them.

Here’s an example where we tried to upload a .woff file to our test site:

How to Fix the “Sorry, this file type is not permitted for security reasons” Error in WordPress?

Below, we’ll show you two ways how to fix the “Sorry, this file type is not permitted for security reasons” error in WordPress:

1. By editing your site’s wp-config.php file
2. By using a free WordPress plugin

1. Add New Permitted File Types Using wp-config.php

WordPress includes an ALLOW_UNFILTERED_UPLOADS option that you can enable in your site’s wp-config.php file. Once enabled, you’ll be able to upload any file type to your WordPress Media Library.

Here’s how to set it up – but first, because you’ll be editing your wp-config.php file, we’d recommend backing up your site before proceeding.

To get started, connect to your WordPress site via FTP/SFTP. Your site’s wp-config.php file is located in the root folder, which is the same folder that has the wp-admin and wp-includes folders.

Then, while editing the wp-config.php file, add the following code snippet above the /* That’s all, stop editing! Happy blogging. */ line:

define('ALLOW_UNFILTERED_UPLOADS', true);

Make sure to save your changes and re-upload the file if needed.

To finish the process, you’ll need to go to your WordPress dashboard and log out of your WordPress account. Then, you can immediately log back in.

After you’ve logged out/in, you should be able to upload any file without triggering the error message:

2. Use the Free WP Extra File Types Plugin

If you’d prefer not to edit your wp-config.php file and/or you want more control over exactly which file types can be uploaded to your site, you can use the free WP Extra File Types plugin at WordPress.org

Once you install and activate the plugin, go to Settings → Extra File Types in your WordPress dashboard.

There, you’ll see a lengthy list of file types. Check the box next to the file type(s) that you want to be able to upload and then click Save Changes at the bottom:

If you don’t see the file type that you’d like to upload on the list, you can also add your own custom file types at the bottom of the plugin‘s settings list: