How to create FTP/SFTP access

Quick answer: Prefer SFTP — it runs over SSH (port 22), is encrypted and needs no extra service: connect with FileZilla/WinSCP using your server or site user. Classic FTP accounts can be created in panels that ship an FTP server (cPanel, HestiaCP, CyberPanel, aaPanel); CloudPanel intentionally uses SFTP site users instead.

Overview

You need file access to upload sites, edit configs and pull backups. SFTP is the modern default: same credentials model as SSH, one open port, strong encryption. Plain FTP is legacy — if you must use it, use FTPS (TLS) and per-site accounts with directory limits.

Before you start

• An SFTP/FTP client: FileZilla (all platforms) or WinSCP (Windows).
• Your server IP and the site/system user credentials from your panel.
• For SFTP: port 22 reachable — see connecting via SSH.

Step-by-step guide

1. SFTP (recommended): in your client choose protocol SFTP, host = server IP, port 22, and log in as the site user (CloudPanel: Sites → site → SSH/SFTP user; HestiaCP/cPanel: the account user).
2. cPanel FTP: Files → FTP Accounts → create an account limited to the site's directory.
3. HestiaCP: WEB → edit the domain → Additional FTP account.
4. CyberPanel: FTP → Create FTP Account (Pure-FTPd).
5. aaPanel: install Pure-FTPd from the App Store, then FTP → Add FTP.
6. Test the login and upload a small file to confirm write permissions land in the right directory.

Common issues

• FTP connects but directory listing hangs: passive-mode ports are blocked — allow the panel's passive port range in the firewall, or switch to SFTP.
• Wrong ownership after upload: uploading as root makes files unreadable for the site user — upload as the site's own user.
• Login refused: FTP service not installed/running (aaPanel needs Pure-FTPd from the App Store first).
• Plain FTP warning: credentials travel unencrypted — enforce FTPS/TLS or use SFTP.

When to contact support

If port 22 appears blocked from your network while the service is Active, or you suspect a network-level issue on the server side, open a support ticket with your IP and a traceroute.

Frequently asked questions

What is the difference between FTP and SFTP?

SFTP runs inside the encrypted SSH connection on port 22 and needs no extra service; classic FTP is a separate, unencrypted protocol. Use SFTP unless something forces plain FTP.

Why does my FTP client connect but fail to list files?

That is almost always blocked passive-mode ports. Allow the FTP server's passive port range in the firewall, enable TLS, or simply switch the client to SFTP on port 22.

Which SFTP client should I use?

FileZilla works on Windows, macOS and Linux; WinSCP is excellent on Windows. Both support SFTP with keys or passwords and can resume large transfers reliably.

Related articles

• How to create a website in a control panel
• How to secure your VPS after deployment
• Control panel security checklist

Need a hand? Contact Cloud2Y support →