{"id":18999,"date":"2026-10-22T21:02:22","date_gmt":"2026-10-22T18:02:22","guid":{"rendered":"https:\/\/www.hyyat.com\/knowledgebase\/sftp-ftps-instead-of-ftp\/"},"modified":"2026-10-22T21:02:32","modified_gmt":"2026-10-22T18:02:32","password":"","slug":"sftp-ftps-instead-of-ftp","status":"publish","type":"docs","link":"https:\/\/www.hyyat.com\/en\/knowledgebase\/sftp-ftps-instead-of-ftp\/","title":{"rendered":"Why Use SFTP or FTPS Instead of FTP to Upload Your Website Files?"},"content":{"rendered":"<div class=\"hkb\" dir=\"ltr\">\n<div class=\"hkb-tldr\"><b>In short<\/b>Plain FTP is old and sends your username, password and files as clear text that can be captured on the network, especially on public Wi-Fi. The secure alternatives are FTPS (FTP encrypted with TLS) and SFTP (over SSH). Both work with FileZilla, and switching takes a minute in the connection settings.<\/div>\n<figure class=\"hkb-fig\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.hyyat.com\/zasogooh\/2026\/10\/hkb-sftp.webp\" alt=\"Secure file uploads: a computer and a server with an encrypted connection and a lock\" width=\"1200\" height=\"630\" loading=\"lazy\" \/><\/figure>\n<p>Many site owners and designers still upload files with plain FTP because \u201cit just works\u201d. The problem is that it was designed in an era when encryption was not normal. When you connect from a caf\u00e9, a hotel or any shared network, your password travels across it as is.<\/p>\n<h2>What is the difference between FTP, FTPS and SFTP?<\/h2>\n<div class=\"hkb-tbl\">\n<table>\n<thead>\n<tr>\n<th><\/th>\n<th>FTP<\/th>\n<th>FTPS<\/th>\n<th>SFTP<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Encryption<\/td>\n<td>None<\/td>\n<td>TLS, like https<\/td>\n<td>Over SSH<\/td>\n<\/tr>\n<tr>\n<td>Usual port<\/td>\n<td>21<\/td>\n<td>21 (explicit TLS)<\/td>\n<td>22 or the server\u2019s SSH port<\/td>\n<\/tr>\n<tr>\n<td>Needs<\/td>\n<td>An FTP account<\/td>\n<td>An FTP account<\/td>\n<td>SSH access enabled for the account<\/td>\n<\/tr>\n<tr>\n<td>Security<\/td>\n<td>Weak<\/td>\n<td>Good<\/td>\n<td>Good<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>On shared hosting with cPanel, FTPS is usually the easiest, because it uses the same FTP accounts you create in cPanel. SFTP needs SSH access to be available for your account.<\/p>\n<h2>How to set FileZilla to an encrypted connection<\/h2>\n<ol class=\"hkb-steps\">\n<li><b>Open the Site Manager:<\/b> From the File menu choose Site Manager, then New site.<\/li>\n<li><b>Choose the protocol:<\/b> Choose FTP, then set Encryption to \u201cRequire explicit FTP over TLS\u201d. Or choose SFTP if SSH is enabled for your account.<\/li>\n<li><b>Enter the connection details:<\/b> The server name, FTP username and password, as shown in cPanel.<\/li>\n<li><b>Accept the certificate on first connect:<\/b> FileZilla shows the server certificate. Check the name belongs to the server, then accept it.<\/li>\n<li><b>Confirm encryption:<\/b> The connection log shows a line indicating TLS, or a lock icon appears at the bottom.<\/li>\n<\/ol>\n<h2>Tips for FTP accounts<\/h2>\n<ul class=\"hkb-list\">\n<li>Create a separate FTP account for each person, limited to a folder, instead of giving everyone the main cPanel account.<\/li>\n<li>Delete the designer\u2019s or developer\u2019s account when their work is done.<\/li>\n<li>Do not save FTP passwords in software on a shared computer.<\/li>\n<li>When you can, use the cPanel File Manager instead of FTP; it works over https.<\/li>\n<\/ul>\n<div class=\"hkb-note ok\"><b>Do I lose anything with encryption?<\/b> No. Speed is about the same, the software is the same, and so are the files. Only one setting changes.<\/div>\n<p>For comparison, there are two guides on connecting to the Storage Box: <a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/access-with-ftp-ftps\/\">access with FTP and FTPS<\/a> and <a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/access-with-sftp-scp\/\">access with SFTP and SCP<\/a>.<\/p>\n<div class=\"hkb-hh\">\n<h2>How Hyyat Host protects your connection<\/h2>\n<ul>\n<li>Our hosting servers support TLS-encrypted FTP for FTP accounts.<\/li>\n<li>The <strong>CSF<\/strong> firewall and <strong>cPHulk<\/strong> block addresses that repeat failed FTP logins.<\/li>\n<li>If you need SSH enabled for your account, open a ticket and we will tell you what your plan includes.<\/li>\n<\/ul>\n<\/div>\n<h2>Frequently asked questions<\/h2>\n<div class=\"hkb-faq\">\n<details>\n<summary>Is SFTP the same as FTPS?<\/summary>\n<p>No. Both are encrypted, but FTPS is FTP with TLS encryption, while SFTP is a different protocol that runs over SSH.<\/p>\n<\/details>\n<details>\n<summary>FileZilla shows an unknown certificate warning. Is that dangerous?<\/summary>\n<p>On first connect FileZilla shows the certificate for you to approve. Check the server name and accept it. If the certificate later changes for no reason, stop and ask support.<\/p>\n<\/details>\n<details>\n<summary>Can I block unencrypted FTP completely?<\/summary>\n<p>That is a server-level setting. On your own server you can configure it; on shared hosting, use the encrypted connection on your side.<\/p>\n<\/details>\n<\/div>\n<div class=\"hkb-rel\"><b>Related guides<\/b><\/p>\n<ul>\n<li><a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/strong-password-password-manager\/\">How to Create a Strong Password and Store It Safely: A Password Manager Guide<\/a><\/li>\n<li><a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/exposed-sensitive-files-env-git-backups\/\">Exposed Sensitive Files on Your Site: .env, .git and Backups, and How to Hide Them<\/a><\/li>\n<li><a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/upload-files-cpanel-file-manager\/\">How to Upload Files with cPanel File Manager<\/a><\/li>\n<li><a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/wordpress-user-roles\/\">WordPress User Roles and Permissions: Who Needs Administrator Access and Who Does Not<\/a><\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.hyyat.com\/en\/kb\/website-protection\/\">All website security guides \u2192<\/a><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>In shortPlain FTP is old and sends your username, password and files as clear text that can be captured on the network, especially on public Wi-Fi. The secure alternatives are FTPS (FTP encrypted with TLS) and SFTP (over SSH). Both work with FileZilla, and switching takes a minute in the connection settings. Many site owners [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"_templately_pack_id":"","_templately_imported_at":"","_templately_source":"","_templately_import_session_id":"","footnotes":""},"doc_category":[2744],"doc_tag":[],"class_list":["post-18999","docs","type-docs","status-publish","hentry","doc_category-website-protection"],"year_month":"2026-10","word_count":566,"total_views":0,"reactions":{"happy":0,"normal":0,"sad":0},"author_info":{"name":"ahmed fathy","author_nicename":"ahmed-fathy","author_url":"https:\/\/www.hyyat.com\/en\/author\/ahmed-fathy\/"},"doc_category_info":[{"term_name":"Website Security","term_url":"https:\/\/www.hyyat.com\/en\/kb\/website-protection\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18999","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/comments?post=18999"}],"version-history":[{"count":0,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18999\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/media?parent=18999"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_category?post=18999"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_tag?post=18999"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}