Many site owners and designers still upload files with plain FTP because “it just works”. The problem is that it was designed in an era when encryption was not normal. When you connect from a café, a hotel or any shared network, your password travels across it as is.
What is the difference between FTP, FTPS and SFTP? #
| FTP | FTPS | SFTP | |
|---|---|---|---|
| Encryption | None | TLS, like https | Over SSH |
| Usual port | 21 | 21 (explicit TLS) | 22 or the server’s SSH port |
| Needs | An FTP account | An FTP account | SSH access enabled for the account |
| Security | Weak | Good | Good |
On shared hosting with cPanel, FTPS is usually the easiest, because it uses the same FTP accounts you create in cPanel. SFTP needs SSH access to be available for your account.
How to set FileZilla to an encrypted connection #
- Open the Site Manager: From the File menu choose Site Manager, then New site.
- Choose the protocol: Choose FTP, then set Encryption to “Require explicit FTP over TLS”. Or choose SFTP if SSH is enabled for your account.
- Enter the connection details: The server name, FTP username and password, as shown in cPanel.
- Accept the certificate on first connect: FileZilla shows the server certificate. Check the name belongs to the server, then accept it.
- Confirm encryption: The connection log shows a line indicating TLS, or a lock icon appears at the bottom.
Tips for FTP accounts #
- Create a separate FTP account for each person, limited to a folder, instead of giving everyone the main cPanel account.
- Delete the designer’s or developer’s account when their work is done.
- Do not save FTP passwords in software on a shared computer.
- When you can, use the cPanel File Manager instead of FTP; it works over https.
For comparison, there are two guides on connecting to the Storage Box: access with FTP and FTPS and access with SFTP and SCP.
How Hyyat Host protects your connection #
- Our hosting servers support TLS-encrypted FTP for FTP accounts.
- The CSF firewall and cPHulk block addresses that repeat failed FTP logins.
- If you need SSH enabled for your account, open a ticket and we will tell you what your plan includes.
Frequently asked questions #
Is SFTP the same as FTPS?
No. Both are encrypted, but FTPS is FTP with TLS encryption, while SFTP is a different protocol that runs over SSH.
FileZilla shows an unknown certificate warning. Is that dangerous?
On first connect FileZilla shows the certificate for you to approve. Check the server name and accept it. If the certificate later changes for no reason, stop and ask support.
Can I block unencrypted FTP completely?
That is a server-level setting. On your own server you can configure it; on shared hosting, use the encrypted connection on your side.
