FTP and SFTP

Published: April 29, 2025

FTP (File Transfer Protocol) and SFTP (Secure File Transfer Protocol) are protocols used to transfer files over the internet. They are commonly used to upload and download files from a web hosting server.

FTP is the older of the two protocols and does not encrypt data, which can potentially expose sensitive information. SFTP, on the other hand, is a secure version of FTP that uses SSH (Secure Shell) to encrypt data during transfer, providing a higher level of security.

Here’s a general process on how to use FTP/SFTP to upload or download files to/from a hosting server:

  1. FTP/SFTP Client: First, you’ll need an FTP/SFTP client. This is a software that allows you to connect to your hosting server and manage your files. Some popular FTP/SFTP clients include FileZilla, WinSCP, and Cyberduck.
  1. Connect to the Server: To connect to your server, you’ll need your FTP/SFTP credentials. These usually include a server address (also known as hostname), a username, and a password. Sometimes, a specific port number is also required. You can usually find these details in your hosting account’s cPanel or equivalent dashboard.
  1. Navigate to the Desired Directory: Once connected, you can navigate through the directories (folders) on your server using the FTP/SFTP client’s interface. The public-facing files of your website are usually located in a directory named public_html or www.
  1. Upload/Download Files: To upload files, you can usually drag and drop files from your local system to the server directory in your FTP/SFTP client. To download files, you can do the reverse – drag and drop files from the server directory to a location on your local system.
  1. Disconnect: Once you’ve finished uploading or downloading files, remember to disconnect from the server in your FTP/SFTP client.


Remember, when using FTP/SFTP, it’s important to be careful not to delete or overwrite important files, as this could potentially break your website. Always keep backups of your files and consider using SFTP instead of FTP whenever possible for added security.