FTP SFTP Thailand Guide
Contents
What is FTP
FTP (File Transfer Protocol) transfers files between client and server over networks using Port 21 (control) and random data ports. The main problem: it transmits data including passwords as plaintext, making it insecure on untrusted networks.
What is SFTP
SFTP (SSH File Transfer Protocol) transfers files over SSH (Secure Shell), encrypting all data including authentication. Uses Port 22 (same as SSH). Much more secure than FTP — always prefer SFTP over FTP when possible.
FTP vs SFTP
Key differences: FTP is unencrypted, sends passwords as plaintext, uses Port 21. SFTP is SSH-encrypted, uses Port 22. FTP is easier on shared hosting not requiring SSH access. Some shared hosts don't offer SFTP. FTPS is FTP over SSL — a middle option.
FTP Client
FileZilla: free open source, best overall, supports FTP/SFTP/FTPS. WinSCP: free Windows client, excellent SFTP/SCP support. Cyberduck: free Mac/Windows with good UI. Transmit: best Mac client but paid. Command line: sftp and scp in Terminal.
Setup: FTP Hosting
In cPanel, go to FTP Accounts → create Username, Password, allowed Directory, and Quota. In FileZilla, enter Host (domain or IP), Username, Password, Port (21 for FTP, 22 for SFTP), and select the correct protocol.
Passive vs Active FTP Mode
Firewalls often block Active FTP Mode because the server initiates the data connection to the client. Passive Mode: the client initiates the data connection, passing through firewalls more easily. If FTP connection fails, try Passive Mode first.
Security: FTP/SFTP
Use FTPS or SFTP instead of plain FTP. Disable plain FTP on your own VPS. Restrict FTP access with IP whitelisting. Use strong passwords or SSH Key Authentication for SFTP. Regularly check FTP logs.
FTP Hosting
Common FTP uses in hosting: uploading website files (HTML, PHP, CSS, JS), downloading file backups, editing files directly (some clients support this), moving files between directories, bulk image uploads, and deploying code from local to production.
What is FTPS
FTPS (FTP Secure or FTP over SSL/TLS) adds SSL/TLS encryption to FTP — different from SFTP (which uses SSH). Explicit FTPS: starts as FTP then upgrades to SSL. Implicit FTPS: SSL from the start on Port 990. More complex than plain FTP but more secure.