After installing Magento 2 using the composer method, the update folder that is used to create the project with remains. I cannot see any reason to keep it after installing the composer dependencies.

Is it safe to delete?

  • It depends. The update folder contains the updater application which is how both components and the Magento system software are updated. If you're certain you will always perform updates from the command line, I guess it's OK to delete it. However, I'm not sure what will happen next time you update Magento; there might be an error or the updater might come back. Feb 16, 2016 at 19:10
  • @SteveJohnson That is, the update folder is only used within the backend?
    – robsch
    Jan 31, 2020 at 11:24

1 Answer 1


Best way is to make it inaccessible. That way you make sure modules that depend on the update application to be (physically) present, still work.

This can be achieved in 2 different ways:

  • Make pub your document root (best)
  • Deny access from update directory

After doing this, it'd be nice to make a module which removes the inaccessible link to the update application in the admin.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.