SFTP vs FTP: Which Should You Use?

SFTP vs FTP: the difference

FTP, FTPS and SFTP all move files between your computer and your hosting. Only plain FTP leaves your password and files readable by anyone on the network between you and the server.

FTPS is FTP with TLS, the encryption HTTPS uses. SFTP is a different protocol that runs over SSH, port 22 by default. Your host may use another SSH port; it is in your welcome email or client area.

FTP, FTPS and SFTP compared
Feature	FTP	FTPS	SFTP
Runs over	Plain TCP	TLS	SSH
Default port	`21`	`21` (explicit), `990` (implicit)	`22`
Password and files	Sent in plain text	Encrypted	Encrypted
Connections	One for commands, another for each transfer	One for commands, another for each transfer	One
cPanel login	An FTP account or your cPanel login	An FTP account or your cPanel login	Your cPanel username, with a password or an SSH key

Which should you use?

Use SFTP or FTPS. Both encrypt your login and your files.

Use SFTP for your own access. It logs in with your cPanel username and password or an SSH key, needs one port, and reaches every folder in your account.
Use FTPS to give someone else access, such as a developer. An FTP account opens only the folder you choose, and you can delete it when the work is done.
Avoid plain FTP, especially on public Wi-Fi. If an old tool supports nothing else, use a separate FTP account and delete it afterward.

How to connect with SFTP in FileZilla

SFTP needs SSH access on your hosting account, and uses your cPanel login, not an FTP account.

Uploading a whole site? See how to upload a website in cPanel.

Find the server name and SSH port in your welcome email or client area. If no port is given, use 22.
Open FileZilla and choose File › Site Manager, then New site.
Set Protocol to SFTP - SSH File Transfer Protocol.
Enter the server name as Host and the SSH port as Port.
Set Logon Type to Normal, then enter your cPanel username and password.
Select Connect.
On the first connection, FileZilla shows the server’s host key. Select OK to trust it. If it changes later without notice, ask your host before you connect.
Open public_html, your main site’s folder.
Download a copy of any file before you replace or delete it.

How to connect with FTPS in FileZilla

Use FTPS with an FTP account that opens one folder. If FileZilla warns that the certificate is for another name, connect with the server name rather than your domain.

In cPanel, open FTP Accounts.
Enter a Log In name and a strong password.
Set Directory to the folder the account may open, such as public_html.
Select Create FTP Account.
In FileZilla, choose File › Site Manager, then New site.
Set Protocol to FTP - File Transfer Protocol.
Set Encryption to Require explicit FTP over TLS.
Enter the server name from your welcome email or client area as Host, and 21 as Port.
Set Logon Type to Normal, then enter the full username, such as name@yourdomain.com, and the password.
Select Connect, check the certificate, and select OK.

Use an SSH key for SFTP

An SSH key logs you in without sending a password, and a passphrase protects it. cPanel can create one. Already have a key? Use Import Key to add its public key instead.

In cPanel, open SSH Access and select Manage SSH Keys.
Select Generate a New Key, enter a strong passphrase, and select Generate Key.
Go back, find the key under Public Keys, select Manage, then Authorize.
Under Private Keys, select View/Download for the same key.
Enter the passphrase, select Convert, and download the .ppk file.
In FileZilla’s Site Manager, set Logon Type to Key file and choose the .ppk file.
Select Connect. Enter the passphrase if FileZilla asks for it.
Once the key works, delete the private key in cPanel, so only your computer holds it.

Common SFTP and FTP errors

Most errors come from the wrong port, the wrong login, or a firewall.

Connection timed out: check the port. SFTP uses the SSH port; FTP and FTPS use 21. If the port is right, try another network, as some office and public networks block these ports.
Timing out after several failed logins? Many servers block your IP address for a while after them. Wait, or ask your host to check.
Connection refused: check the server name and port, and that the protocol matches the port.
Authentication failed over SFTP: use your cPanel username and password. FTP accounts work only over FTP and FTPS. If passwords are refused, use an SSH key.
530 Login authentication failed over FTP: enter the full FTP username, including @yourdomain.com. Reset the password in cPanel › FTP Accounts if you are unsure.
Server refused our key: authorize the key in cPanel › SSH Access › Manage SSH Keys, and choose the matching .ppk file in FileZilla.
Failed to retrieve directory listing over FTP or FTPS: in Site Manager › Transfer Settings, set Transfer mode to Passive, or switch to SFTP, which needs one port.
Permission denied when you upload: check the permissions of the file or folder. See file permissions and chmod explained.

HostUpIndia Web & cPanel Hosting

HostUpIndia Web & cPanel Hosting includes terminal (SSH) access for SFTP and SSH keys, and cPanel for FTP accounts. Every plan also has LiteSpeed, NVMe storage, free SSL, the AI Website Builder and daily backups kept 30 days.

From ₹49 a month on 3-year billing. Prices exclude 18% GST. See Web & cPanel plans.
Moving from another host? The in-house team moves your site for you: free website migration.
Support tickets and email are received 24 hours a day, 7 days a week; WhatsApp is open for questions from 10 am to 7 pm IST, Monday to Saturday.
More help guides.

SFTP vs FTP: which should you use?