FTP/SFTP

FTP (File Transfer Protocol) is a standard protocol for sending and retrieving files from hosting servers. SFTP (SSH File Transfer Protocol) is a more secure version — encrypts all transferred data including your login credentials.

Both are used for the same purpose: accessing and managing files on the hosting server from your local computer.

Simple analogy

Imagine your hosting server is a big warehouse. FTP and SFTP are truckloads that allow you to send or pick up goods from these warehouses. The difference is, FTP transports goods openly — anyone on the road can see the contents. SFTP transports goods in locked containers that only the sender and recipient can open.

Difference between FTP and SFTP

What Can Be Done with FTP/SFTP?

F

T

P and S

F

T

P are used for various server management needs:

• Upload HTML, CSS, JavaScript, or image files to the

server

• Download files from the server to the local computer as a manual backup

• Edit configuration files such as wp-config.php or .htaccess

• Manage file and folder permissions on the

server

• Move or rename files in large numbers at once

• Accessing the server when File Manager in cPanel cannot be used

Commonly Used FTP Clients

FTP and SFTP cannot be accessed directly from a browser — you need a special application called an F

T

Apart from separate applications, some code editors such as VS Code also support direct SFTP connections via extensions.

Information Required for Connection

To connect to a server via FTP/SFTP, you need the following four pieces of information — usually available in your hosting dashboard or welcome email:

FTP Account vs SFTP via SSH

In shared hosting, there are two ways to access the server via this protocol:

Ordinary FTP Account — Created via cPanel, can be restricted access to certain folders. Suitable for giving to developers or designers without giving full access to the server.

SFTP via SSH — Uses SSH credentials and provides broader access to the server. Usually available in hosting packages that have SSH access enabled. Safer and more flexible, but requires less technical understanding.

What You Need to Pay Attention to

• Always use SFTP, not FTP — Almost all modern hosting supports SFTP. There's no reason to stick with unencrypted FTP, especially if you manage a business website.
• Do not store FTP passwords on clients without encryption — Some FTP clients store passwords in an easy-to-read format. Make sure you use the credential store encryption feature if available.
• File permissions need to be considered when uploading — Files uploaded via FTP sometimes have incorrect permissions. PHP files generally need 644 permissions and 755 folder permissions. Permissions that are too open such as 777 are a security gap.
• FTP is not a solution for large migrations — To move hundreds of files at once, using SSH with the rsync command or the backup/restore feature in cPanel is much more efficient than FTP.

FAQs