Skip to main content

How to connect to your site with SFTP

Sometimes you need to get at your website's files directly, to upload a big batch of images, replace a file, or grab a backup. SFTP is the safe way to do it. This guide walks you through connecting, whether your site runs on Joomla, WordPress or something else.

What SFTP is (and why not plain FTP)

SFTP (SSH File Transfer Protocol) lets you move files between your computer and your web server over an encrypted connection. Plain FTP sends your username, password and files unencrypted, so anyone watching the network can read them. If your host gives you the choice, always pick SFTP.

Looking for FireFTP? It's been discontinued; here's what to use now

FireFTP was a Firefox add-on that a lot of people used for this. It stopped working with modern versions of Firefox and is no longer maintained. These are good free replacements:

  • FileZilla (Windows, Mac, Linux)
  • Cyberduck (Mac, Windows)
  • WinSCP (Windows)

If you'd rather not install anything, skip ahead to the cPanel File Manager section.

What you'll need

Before you connect, have these four things ready:

  • Host: the server address your host gave you.
  • Port: the SFTP port your host gave you.
  • Username: your SFTP or cPanel username.
  • Password or key: your account password, or an SSH key if your host requires one.

If you don't have these, ask your host. 3by400 clients can submit a support ticket to get their SFTP connection info. Not every hosting account has SFTP turned on by default.

Connect with FileZilla (or Cyberduck or WinSCP)

  1. Open FileZilla and go to File > Site Manager.
  2. Click New site and give it a name you'll recognize.
  3. Set Protocol to SFTP - SSH File Transfer Protocol.
  4. Enter the host and port from your hosting provider.
  5. Set Logon Type to Normal (password) or Key file (SSH key), then enter your username and your password or key.
  6. Click Connect. The first time, FileZilla asks you to trust the server's key. Check that the host is right, then accept.

Your computer is on the left and your server is on the right. Your site files are usually in public_html.

Cyberduck and WinSCP work the same way: choose SFTP, then enter the same host, port, username and password or key.

No app needed: use cPanel File Manager

If your host uses cPanel, you can manage files right in your browser:

  1. Log in to cPanel.
  2. Open File Manager.
  3. Go to public_html (or your site's folder).
  4. Use Upload, Download, Edit and Extract from the toolbar.

This is great for quick changes. For lots of files, an SFTP app is faster.

Uploading and editing files safely (back up first)

  • Make a backup first. Download a copy of any file before you change or replace it, or take a full site backup.
  • Don't delete what you don't recognize. Folders like wp-admin or administrator are part of your CMS.
  • Watch file permissions. Files are usually 644 and folders 755. Don't set anything to 777.
  • Edit configuration files carefully. One typo in configuration.php or wp-config.php can take your site down.
  • Clear your cache. If you don't see your change on the site, clear your CMS cache and your browser cache.

Common connection errors

  • "Connection timed out": the host or port is probably wrong, or a firewall is blocking you. Double-check both, then ask your host.
  • "Authentication failed": check your username and password. Some hosts need an SSH key instead of a password.
  • "Connection refused": SFTP or SSH access may not be turned on for your account.
  • You've been blocked after a few tries: too many failed logins can get your IP blocked. Wait a while or ask your host to unblock you.
  • "Permission denied" when uploading: you may be outside your site folder, or the folder permissions are wrong.

Rather not deal with files?

That's fair. With our boutique hosting, we handle uploads, updates and backups for you. Already a 3by400 client? Submit a support ticket and we'll help.