# User Isolation
# Overview
By default, Forge uses the forge user that is created as part of the provisioning process for all deployments, daemons, scheduled jobs, PHP-FPM, and other processes.
With User Isolation, Forge will create a separate user for the site. This is particularly useful when combined with a project like a WordPress website in order to prevent plugins from maliciously accessing content in your forge (or other isolated user) directories.
Forge Permissions
The forge user is considered a "super user" and is therefore able to read all files within isolated user directories.
# Sudo Access
Like the forge user, newly created isolated users also have limited sudo access. They may reload the PHP-FPM services requiring a password:
sudo -S service php8.0-fpm reload
If you need further sudo access, you should switch to the root user.
# Connecting Via SFTP
You can connect to your server via SFTP using the isolated user for managing files and directories manually. We recommend using an SFTP client such as Transmit or Filezilla.
Upload Your SSH Key
You should first upload your SSH key to the server for the isolated user.