Connect Wasabi to WordPress

1. 1

   Create the bucket

   In the Wasabi console, go to Buckets and select Create Bucket.

   Name: lowercase letters, numbers and hyphens. If you plan to serve files through Cloudflare (see the domain step), the bucket name must be exactly your media domain, for example media.yoursite.com.

   Region: pick the one closest to most of your visitors and enter the same region in Offloft.

   Bucket name

   my-site-media

   Copy

   Open Wasabi's consoleWasabi's documentation

2. 2

   Create a user with access to this bucket only

   Go to Policies > Create Policy, paste the policy below and save it, for example as offloft-my-site-media. It allows exactly what Offloft does, on "my-site-media" only.

   Go to Users > Create User, tick Programmatic (create API key), and attach the policy you just made.

   Copy the Access Key and Secret Key into Offloft, or download them as a CSV file. Wasabi shows the secret only once.

   Policy

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Sid": "OffloftListBucket",
         "Effect": "Allow",
         "Action": ["s3:ListBucket"],
         "Resource": ["arn:aws:s3:::my-site-media"]
       },
       {
         "Sid": "OffloftManageFiles",
         "Effect": "Allow",
         "Action": ["s3:PutObject", "s3:GetObject", "s3:DeleteObject", "s3:AbortMultipartUpload"],
         "Resource": ["arn:aws:s3:::my-site-media/*"]
       }
     ]
   }

   Copy

   Open Wasabi's consoleWasabi's documentation

3. 3

   Let visitors read the files

   Wasabi restricts public files. Only paid accounts created before March 13, 2023 can switch it on themselves: open the bucket, go to Settings > Public Access Override and select Enable Public Access. Then add the bucket policy below under Settings > Policies.

   Accounts created on or after March 13, 2023 (and trial accounts) cannot make files public in the console. Ask Wasabi Support (support@wasabi.com) to enable public access for the bucket, or serve files through Cloudflare as described in the next step.

   Bucket policy

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Sid": "PublicReadGetObject",
         "Effect": "Allow",
         "Principal": "*",
         "Action": ["s3:GetObject"],
         "Resource": ["arn:aws:s3:::my-site-media/*"]
       }
     ]
   }

   Copy

   Open Wasabi's consoleWasabi's documentation

4. 4

   Serve files from your own domain through CloudflareOptional

   This needs the bucket to be named exactly like the domain, for example media.yoursite.com.

   In Cloudflare DNS, add a CNAME record for the domain pointing to your bucket's region host, s3.your-region.wasabisys.com, with the proxy (orange cloud) on.

   In Offloft, use https://media.yoursite.com as the delivery address.

   CNAME target

   s3.your-region.wasabisys.com

   Copy

   Delivery address

   https://media.yoursite.com

   Copy

   Open Wasabi's consoleWasabi's documentation

5. 5

   Allow your site to read files (CORS)Optional

   This step is optional. Images on your pages load without it. You need it only when your site's own scripts read files from storage, for example image editors, web fonts or 3D viewers. The rule below lets only your site read files, and only read them.

   Wasabi sets CORS through its S3 API. With the AWS CLI configured for this user, run the command below.

   AWS CLI command

   aws s3api put-bucket-cors --bucket my-site-media --endpoint-url https://your-endpoint --cors-configuration '{"CORSRules":[{"AllowedOrigins":["https://yoursite.com"],"AllowedMethods":["GET","HEAD"],"AllowedHeaders":["*"],"MaxAgeSeconds":3600}]}'

   Copy

   Wasabi's documentation

6. 6

   Run the connection test and the delivery check

   In Offloft, paste your values and run the connection test. It checks your credentials, finds the bucket, uploads a test file, reads it back and deletes it. The delivery check then loads a small test image from your public address. Offloft serves nothing from the cloud until both pass.

The steps above match the guide inside the plugin, checked against Wasabi's documentation on 2026-10-26. Example values are shown here; the plugin fills in your own.