FTP vs SFTP vs FTPS — What's the Difference?

There are three protocols commonly used to transfer files to a web server. Choosing the right one matters for security.

FTP (File Transfer Protocol)

The original, unencrypted protocol. Data — including your username and password — is sent in plain text. Anyone on the same network can intercept it.

Use it? No. Only use FTP on private, isolated networks, never over the internet.

Port: 21

SFTP (SSH File Transfer Protocol)

Not related to FTP despite the name. SFTP runs over SSH and encrypts all data, including credentials.

Use it? Yes — this is the recommended choice for most users.

Port: 22

FTPS (FTP Secure)

FTP with SSL/TLS encryption added on top. Two modes exist: Explicit FTPS (starts unencrypted, upgrades to TLS) and Implicit FTPS (always encrypted on port 990).

Use it? Only if a service specifically requires FTPS. SFTP is simpler and more widely supported.

Port: 990 (Implicit) or 21 (Explicit)

Which to Use at 330 Hosting

Use SFTP on port 22. All our servers support SSH and SFTP. Configure your FTP client with Protocol = SFTP and Port = 22.

Tips

• FileZilla, WinSCP, Cyberduck, and most clients support SFTP
• SFTP uses your cPanel SSH credentials or a dedicated FTP account