How to add the Permissions-Policy header in Apache

Permissions-Policy turns browser features such as camera, microphone and geolocation on or off for your site and any embedded frames.

Apache configuration (.htaccess or virtual host)

<IfModule mod_headers.c>
  Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"
</IfModule>

Requires mod_headers (a2enmod headers on Debian/Ubuntu). Reload Apache after editing the virtual host.

Only disable features you do not use. List each feature your site needs with an allowlist such as camera=(self).

curl -sI https://your-site.com | grep -i permissions-policy

Or run a free Korrali Web scan to check this and every other security header at once.