Overview
FTP and SFTP are network protocols for uploading files from your computer to your web server (using apps such as FileZilla and Cyberduck). At DreamHost, all website users use SFTP on port 22 — FTP is insecure (unencrypted) and should never be used. This article explains the difference and DreamHost's SFTP setup.
What is the difference between FTP and SFTP?
FTP
FTP (File Transfer Protocol) is an old network protocol that transfers files between your computer and the web server. The problem with FTP is that the data is not encrypted during transfer, making it insecure.
- For this reason, FTP should NEVER be used.
SFTP
SFTP (Secure File Transfer Protocol) is the modern network protocol that transfers files between your computer and the web server. It provides the same functions as FTP while also encrypting your data during transfer.
- Since the data is encrypted, SFTP should always be used.
FTP is an old term still commonly used to refer to transferring data to your server. For example, you may see this used in reference to an FTP client. However, modern apps only use the SFTP protocol since FTP is insecure.
How does DreamHost use FTP and SFTP?
All website users at DreamHost are configured to use SFTP and port 22.
Whenever you use a program such as FileZilla or Cyberduck to connect to your web server, always use port 22. This ensures you are using SFTP, so your data remains safe and protected.