Using SFTP and FTPS for Secure File Transfers
While traditional FTP works, it is not secure because usernames and passwords are sent in plain text. We strongly recommend using SFTP (SSH File Transfer Protocol) or FTPS (FTP over SSL/TLS) to protect your credentials and data during transfers.
What’s the Difference?
- FTP: Unencrypted, insecure, not recommended.
- SFTP: Runs over SSH, fully encrypted, widely supported.
- FTPS: FTP with SSL/TLS encryption, also secure but less common than SFTP.
Both SFTP and FTPS ensure your login details and file transfers are encrypted, preventing interception.
Connecting with FileZilla
- Open FileZilla.
- Go to File → Site Manager.
- Click New Site and enter your details:
- Host: ftp.your-domain-name.com
- Protocol: Select SFTP – SSH File Transfer Protocol
- Port: 22 (default for SFTP)
- User: Your FTP username
- Password: Your FTP password
Click Connect to establish a secure session.
Connecting with WinSCP
- Open WinSCP.
- Select SFTP as the file protocol.
- Enter your hostname, username, and password.
- Click Login.
WinSCP also supports FTPS if you prefer SSL/TLS.
Using Visual Studio Code (VS Code)
With the SFTP extension
{
"host": "ftp.your-domain-name.com",
"username": "your-ftp-username",
"password": "your-ftp-password",
"protocol": "sftp",
"port": 22,
"remotePath": "/wwwroot",
"uploadOnSave": true
}
Save this configuration in .vscode/sftp.json and VS Code will securely upload files on save.
✔ Tip: Always use SFTPFTPS instead of plain FTP.
This ensures your credentials and files are encrypted, keeping your website secure.