On a correctly configured hosting environment, WordPress can install plugins/themes and run updates without asking for FTP credentials.
If WordPress shows a prompt like “Connection Information” and asks for FTP host/username/password, it usually means WordPress cannot write to the filesystem (for example wp-content).
If the hosting account is out of disk space (or inodes), WordPress cannot write files.
This is the safest way because it applies the correct ownership and permission model for your hosting subscription.
If you check permissions manually, typical values are:
755644Important: avoid making files/folders world-writable (like 777). This is unsafe.
Entering FTP credentials into the WordPress prompt may “work around” the issue, but it does not fix the underlying permissions problem. It also increases risk if credentials are stored or intercepted.
Some setups can be fixed by forcing direct filesystem writes. Only do this if your permissions/ownership are already correct.
Edit wp-config.php and add:
define('FS_METHOD', 'direct');