Website files need to move from one place to another: from a developer’s computer to hosting, from staging to live or from your hosting account to a backup location.
For many site owners, this is where terms such as FTP and SFTP appear. They sound technical, but the basic idea is simple: they are ways to transfer files between your computer and a server.
What is FTP?
FTP stands for File Transfer Protocol. It has been used for many years to upload, download, rename and organise website files.
The important caveat is that traditional FTP is not encrypted. That means usernames, passwords and transferred data may not be protected in the way modern website owners expect.
What is SFTP?
SFTP stands for SSH File Transfer Protocol. It provides a more secure way to transfer files because the connection is encrypted.
Where available, SFTP is usually the better choice for managing website files. It is especially important when working over public networks or handling sensitive files.
Use a reliable client
File transfer clients such as FileZilla can make it easier to connect to your hosting account and manage files. Always download tools from the official website and keep them updated.
Avoid saving passwords on shared computers. If a device is compromised, saved FTP or SFTP details can put the website at risk.
Be careful with permissions
File permissions control who can read, write or execute files. Incorrect permissions can break a website or create security risks.
Do not change permissions unless you understand why. If a guide tells you to make files or folders widely writable, treat that advice with caution.
Keep backups before changing files
Before editing, deleting or replacing website files, make sure you have a clean backup. A small mistake in the wrong folder can take a site offline.
This is especially important when editing configuration files, theme files or plugin files.
Use the right tool for the job
Many hosting control panels include a browser-based file manager, which can be useful for quick edits. SFTP is often better for larger uploads, development work or repeated file management.
Secure file transfer is not glamorous, but it is part of good website maintenance. Use encrypted connections where possible, protect login details and take backups before making changes.