Connect via SFTP instead of FTP with TLS

There are several secure ways to transfer files between your computer and the server. The most common are FTP with TLS (FTPS) and SFTP. Here we explain the differences and how to set up an SFTP connection in cPanel using clients such as FileZilla.

Differences between FTP with TLS (FTPS) and SFTP

• FTP with TLS (FTPS):

  • Uses the traditional FTP protocol, but adds a layer of encryption with TLS.
  • The default port is 21.
  • Lets you create multiple FTP accounts from cPanel, known as sub-accounts.
  • Works with most FTP clients.

• SFTP:

  • Uses the SSH protocol to transfer files securely.
  • At Hostsuar it uses SSH port 93. This isn't a universal cPanel value and may be different with other providers.
  • It's only available for the main cPanel user, not for FTP sub-accounts.
  • Requires SSH access to be enabled on your hosting account.

Both methods encrypt the connection when set up correctly. Choose SFTP for the main user with SSH enabled and explicit FTPS when you need an FTP account limited to one directory. SFTP doesn't add a second layer to FTPS: they are different protocols.

Requirements for using SFTP in cPanel

1. SSH access enabled on your hosting account. If you don't have it, you can follow this guide: Enable SSH access
2. You must connect with the main cPanel user (not with FTP sub-accounts).
3. Know the assigned SSH port. At Hostsuar it's 93.

How to set up an SFTP connection in FileZilla

1. Open FileZilla and go to File > Site Manager.
2. Click New site and give it a name.
3. In the Protocol field, select SFTP - SSH File Transfer Protocol.
4. In Host, enter the server name shown for your account in Login details. Don't use a domain that already points to another provider.
5. In Port, enter 93 (or the SSH port your provider has given you).
6. In User, enter the main cPanel username.
7. Choose the logon type you have prepared: the main user's password or an SSH key already authorised on the account. If you use a key, set up its file or the agent supported by your FileZilla installation. Protect the private key with a passphrase.
8. Click Connect.

Important: on the first connection, compare the server's key fingerprint with one obtained through an independent, trusted channel. Don't blindly accept the warning FileZilla shows; if the fingerprint doesn't match or has changed without notice, cancel the connection and verify it before sending credentials.

Check the access

Test with a small file in the right directory and check that you can download it. An authentication error isn't fixed by switching to the FTP port: check the user, password or authorised key and whether SSH is enabled.

If you only want to give a third party access to one website, don't share the main user for convenience: consider restricted FTPS accounts instead.