Open the plugin’s settings page and look for a field labeled “Maximum Upload Size” or similar. Enter your desired upload limit, such as 64M or 128M, and save your changes. If the plugin displays a message that your server restricts higher values, contact your hosting provider.
To test if the new upload limit is active, go to Media > Add New in your WordPress dashboard and check if the maximum file size has increased. Try uploading a file that was previously too large to confirm the change worked. If you're still unsure, use a plugin like Site Health or check your browser console for any file upload errors during the attempt.
Recommended upload size settings typically range from 64MB to 512MB, depending on your website's needs. For most blogs and business sites, 128MB is a safe and sufficient limit. Avoid setting the limit too high unnecessarily, as it can strain server resources and open the door to potential security risks, such as denial-of-service attacks. Always balance flexibility with performance and security.
Certain hosting environments place strict limits on what you can change on your own. If you are on a shared plan with restricted access, reaching out to support may be your only option. It is important to know when their help is necessary and what you should ask for.
Locked Settings: If your attempts to increase the upload size through php.ini, .htaccess, or WordPress functions don’t work, your host may have locked these settings. Shared hosting providers often prevent users from overriding PHP limits directly. In this case, support intervention is required.
Requesting Increases: Ask your host to raise upload_max_filesize, post_max_size, and max_execution_time. Be clear about the new limits you need and why, for example, uploading large videos or plugins. Most hosts will apply these changes if you are within your plan's allowances.
Permission Limits: Even if you have access to configuration files, changes might not take effect due to server-level restrictions. This usually applies on shared or managed WordPress plans. Support can clarify what’s allowed and apply changes on your behalf.
Config File: If your host allows per-user php.ini files but they aren’t working, the server might be ignoring them. Ask support whether custom PHP files are supported and how to format them properly. They may recommend alternative methods specific to their system.
Plan Limits: In cases where your host can’t raise the limits due to plan constraints, they may suggest upgrading to a higher-tier plan. VPS or cloud hosting often allows full control over PHP configurations. It's worth asking if a different plan would unlock the flexibility you need.
Security Tips for Increasing Upload Size in WordPress
Increasing your WordPress upload limit gives you more flexibility, but it also introduces potential risks such as performance slowdowns, unauthorized access, and malware uploads. Use these security best practices to reduce those risks while maintaining smooth functionality.
1.Validate File Types: Use WordPress hooks like wp_check_filetype_and_ext to restrict unsupported or risky file formats. This prevents attackers from uploading disguised scripts or executables.
2. Limit Access: Restrict upload capabilities to trusted user roles only. Giving every user upload access can lead to accidental or intentional misuse. Use role management plugins to control who can upload and how.
3. Monitor Usage: Keep an eye on disk space and server load through your hosting dashboard , especially if you are allowing large uploads. Excessive file storage can slow down your site and trigger hosting limits. Regular monitoring helps catch issues early.
4. Malware Scanning: Enable automatic scanning of uploaded files using security plugins like Wordfence or server-side tools. Even allowed file types can carry hidden threats. Scanning adds an extra layer of protection against backdoor access.
5. Use HTTPS: Make sure file uploads are sent over a secure connection using HTTPS. This encrypts data in transit and protects against interception or tampering. It is a simple step that strengthens your site’s overall security posture.
Troubleshooting Common Issues
Even after making changes, your upload limit might not update right away. This can be caused by server restrictions, configuration errors, or local caching. Understanding how to pinpoint the issue saves time and avoids unnecessary frustration.
Cache Conflicts: If your new upload limit doesn’t appear, the issue may be caused by cache conflicts, start by clearing your browser and site cache. Plugins like WP Super Cache or server-level caching can hold onto outdated values. Also, check for .user.ini or php.ini overrides that may be conflicting with your changes.
Server Error: 500 errors usually point to a syntax mistake in .htaccess or another config file. Revert any recent edits line by line and ensure directives are correctly formatted. Even a single misplaced character can crash the entire site temporarily.
Host Restrictions: If you’ve updated all the right settings but limits remain unchanged, your host may have enforced caps on your account tier. In shared environments, certain values can’t be overridden by user configurations. Contacting support is the only way to confirm or lift these restrictions.
Plugin Limitations: If a plugin doesn’t increase your limit, it might not have permission to change server-level settings. Some plugins are only effective when the server environment allows user-based configuration edits. Always test results directly in the Media Library after activation.
File Blocking: Even with higher upload sizes, WordPress may still block unsupported file types. By default, it only allows safe formats like JPG, PNG, PDF, and MP4. You’ll need to manually allow uncommon file types by modifying the functions.php file or using a MIME type plugin.
