FTP vs SFTP vs FTPS: which file transfer method to use
FTP, FTPS and SFTP compared: how each one works, which ports they use, which UnderHost plans support them, and how to choose the safest option for your account.
UnderHost NOC
Network Operations
On this page
All three move files between your computer and your hosting account. FTP is the oldest and sends everything, including your password, unencrypted. FTPS is FTP with TLS encryption added. SFTP is a different protocol that runs over SSH. On UnderHost shared hosting use FTP with TLS (FTPS). On a VPS, a dedicated server or Managed Business hosting, use SFTP.
FTP, FTPS and SFTP compared
| FTP | FTPS (FTP over TLS) | SFTP | |
|---|---|---|---|
| Based on | FTP | FTP plus TLS, like HTTPS | SSH |
| Encryption | None. Password and files travel in plain text | Login and files are encrypted | Login and files are encrypted |
| Port | 21, plus extra data ports | 21 (explicit TLS), plus extra data ports | 22, one connection |
| Login | FTP account or cPanel login | FTP account or cPanel login | SSH user (password or SSH key) |
| Needs SSH access | No | No | Yes |
| Firewall friendly | Less, because of the data ports | Less, because of the data ports | Yes, a single port |
SFTP is not "FTP with security added". It is a separate file transfer system built into SSH, which is why it needs SSH access to the account.
What each UnderHost plan supports
| Plan | FTP / FTPS | SFTP | Use |
|---|---|---|---|
| Shared hosting (Canada and offshore plans) | Yes, unlimited FTP accounts | No, shared plans do not include SSH access | FTP with TLS |
| Managed Business hosting | Yes, unlimited FTP accounts | Yes, SSH access is included | SFTP |
| Cloud VPS and dedicated servers | Only if you install an FTP server | Yes, with full root access | SFTP |
Shared hosting plans also include anonymous FTP. Leave it off unless you need a public download area, because anyone can connect to it.
Encrypt FTP with TLS (FTPS)
On shared hosting you connect with an FTP client. Turn on TLS in the client so your password and files are encrypted. In FileZilla:
-
Open the Site Manager
Go to File → Site Manager and click New site.
-
Choose FTP with TLS
Set Protocol to FTP - File Transfer Protocol and Encryption to Require explicit FTP over TLS. Use your domain or server hostname as the host, and port 21.
-
Log in with an FTP account
Use the cPanel username and password, or an FTP account created in cPanel → Files → FTP Accounts. FTP account usernames include the domain, for example
upload@example.com. -
Accept the certificate
The first time, FileZilla shows the server's certificate. Check that the host name matches your server, then trust it.
Give developers and designers their own FTP account, limited to the folder they need, instead of sharing the cPanel password. You can delete one account without changing everyone's access.
Connect with SFTP
On a VPS, a dedicated server or Managed Business hosting, use the SSH login. VPS and dedicated server credentials are sent by encrypted email or shown in CustomerPanel. In FileZilla set Protocol to SFTP - SSH File Transfer Protocol, port 22 (or your custom SSH port). From a terminal:
# open an interactive SFTP session
sftp user@your-server-ip
# upload and download inside the session
put local-file.zip /var/www/example.com/
get /var/www/example.com/backup.sql
# copy a whole folder in one command
scp -r ./site user@your-server-ip:/var/www/example.com/SFTP works with SSH keys too, so you can log in without a password. See SSH key authentication.
How to choose
- Shared hosting: FTP with TLS. Plain FTP only if your client cannot do TLS, and never on public Wi-Fi.
- VPS, dedicated or Managed Business: SFTP, ideally with an SSH key.
- Small edits: the cPanel File Manager works in the browser over HTTPS and needs no client. See cPanel File Manager.
- Many files or a whole site: upload one zip file, then extract it with File Manager. It is much faster than thousands of small transfers.
Troubleshooting
Connection times out on port 21: your network may block FTP. Try another network, or use the cPanel File Manager.
Login works but the folder list never loads: the data connection is blocked. In FileZilla set Transfer mode to Passive under the site's Transfer Settings.
"Connection refused" with SFTP: check that you chose SFTP, not FTP, and the right SSH port. On shared hosting SFTP is not available, so use FTP with TLS.
"530 Login authentication failed": the username or password is wrong. FTP account usernames include the domain, like user@example.com.
Blocked after several failed logins: repeated failures can trigger the server's brute-force protection. Wait, then try once with the correct details, or open a ticket with your IP address.
FAQ
Related: FTP client setup: FileZilla, WinSCP, Cyberduck | SFTP guide | SSH access basics | cPanel File Manager
Need a developer-friendly server?
Use an UnderHost Cloud VPS for SSH, Git, Node.js, Python, Laravel, Docker, cron, and custom development workflows.
