If you have ever needed to move files onto your website and someone casually told you to just use SFTP, you would be forgiven for nodding along while quietly wondering what on earth they meant. It is one of those acronyms that gets thrown around as though everyone was born knowing it, yet the idea behind it is refreshingly simple: it is a secure way to send files between your computer and your web server. We walk small business owners through this all the time, usually when they are updating a site or handing files to a developer, so let us demystify it together.

What SFTP actually means

SFTP stands for SSH File Transfer Protocol, and it is a method for transferring files over a secure, encrypted connection. The SSH part, short for Secure Shell, is the technology that wraps your data in protection as it travels across the internet, so nobody can peek at your files or login details along the way. In practical terms, you use an SFTP client to connect to your server, then drag files back and forth much as you would between two folders on your own computer.

The key word is secure. Older file transfer methods sent everything, including your password, in plain readable text. SFTP closes that door by encrypting the whole conversation, which is exactly why it has become the sensible default for anyone serious about their website.

Why SFTP is worth caring about

Security is the headline benefit, and for a business it is not a small one. When you upload files over an encrypted connection, your credentials and content stay private, which matters enormously if you handle customer data or simply value your own peace of mind. A single intercepted password can hand someone the keys to your whole site.

Beyond safety, SFTP gives you direct, reliable control. You can upload large files, fix a broken plugin, restore a backup, or hand precise access to a developer without exposing your main hosting login. It is dependable, widely supported, and works the same way across almost every host, so the skill travels with you wherever your website lives.

How to connect over SFTP, step by step

Here is the friendly route from nervous beginner to confident file mover.

Gather your connection details

You will need four things from your host: the hostname or server address, your username, your password or SSH key, and the port number, which is usually 22 for SFTP. Most hosts list these in your control panel or your welcome email.

Choose an SFTP client

An SFTP client is simply the app you use to connect. Popular free options include FileZilla, WinSCP on Windows, and Cyberduck on Mac. Download one you like the look of and install it as you would any other program.

Enter your details and connect

Open the client, pop in your hostname, username, password and the port, then hit connect. Make sure the protocol is set to SFTP rather than plain FTP, as this is the setting that keeps everything encrypted.

Move your files

Once connected you will see your local files on one side and your server files on the other. Drag files across to upload or download them, taking care to place website files in the correct directory, often called public_html or www.

Disconnect when you are done

Close the connection once you have finished. It is a small habit, but leaving sessions open unnecessarily is untidy and mildly risky, so tidy up after yourself.

SFTP and plain FTP, compared

People often use the terms interchangeably, but the difference genuinely matters. Here is the quick comparison we share with clients:

• Security: SFTP encrypts everything including your password, while classic FTP sends it all in plain text that others could intercept.
• Ports: SFTP typically uses port 22, whereas FTP uses port 21, so your settings will differ.
• Underlying technology: SFTP runs over SSH, while FTP is a much older standalone protocol with no built-in encryption.
• Firewalls: SFTP tends to be friendlier with firewalls because it uses a single connection, while FTP can be fiddly with its separate data channels.
• Recommendation: for almost every modern website, SFTP is the clear choice, and many hosts now discourage or disable plain FTP entirely.

In short, if you have the option, always reach for SFTP.

The habits that make SFTP painless

A little discipline goes a long way. Store your connection details somewhere secure, ideally in a password manager rather than a sticky note on your monitor. Where your host supports it, use SSH keys instead of passwords for an extra layer of strength. Always double-check you are uploading to the correct directory before you overwrite anything, and keep a backup of any file you are about to replace, just in case. Only give SFTP access to people who genuinely need it, and remove it promptly when a project ends. Boring habits make for calm websites.

The SFTP mistakes we see all the time

The most frequent slip is accidentally connecting over plain FTP instead of SFTP, which quietly undoes all the security you were after, so always confirm the protocol. Close behind is uploading files to the wrong folder, which can leave your changes seemingly invisible because they landed outside the live site directory.

We also see people overwrite important files without a backup and then panic when something breaks, as well as sharing a single powerful login with several people rather than issuing separate access. Finally, leaving old accounts active long after a developer has moved on is a common and avoidable risk. None of these are hard to prevent once you know to watch for them.

Where secure file transfer is heading next

The broad trend is towards even less manual fiddling. Many hosts and site builders now offer web-based file managers and automated deployment pipelines, so pushing changes live can happen with a click or a code commit rather than a manual drag and drop. That does not make SFTP obsolete, but it does mean it increasingly sits alongside smarter tooling.

Security expectations are also rising, with SSH keys and multi-factor protection becoming the norm rather than a nicety. As more businesses move to managed and cloud hosting, the raw mechanics get tucked further out of sight, yet the underlying principle, moving files safely over an encrypted link, remains exactly as relevant as ever.

What does SFTP stand for?

SFTP stands for SSH File Transfer Protocol. It combines file transfer with the Secure Shell protocol, which encrypts the connection so your files and login details cannot be read by anyone intercepting the traffic.

Is SFTP the same as FTP?

No. FTP is an older protocol that sends data, including passwords, in plain text, while SFTP encrypts the entire connection over SSH. They also use different ports and work in technically different ways, so SFTP is the safer, more modern choice.

What port does SFTP use?

SFTP normally uses port 22, the same port as SSH. Plain FTP, by contrast, uses port 21. If your connection will not establish, checking that you have the correct port set in your client is a good first troubleshooting step.

Do I need special software to use SFTP?

You need an SFTP client, which is a small, usually free application such as FileZilla, WinSCP or Cyberduck. Once installed, you simply enter your server details and connect. No coding knowledge is required to move files back and forth.

Your quick SFTP checklist

• Confirm the protocol: make sure you are connecting via SFTP, not plain FTP.
• Gather details: hostname, username, password or key, and port 22.
• Pick a client: FileZilla, WinSCP or Cyberduck all do the job nicely.
• Check the directory: upload website files to public_html or www.
• Back up first: save a copy before overwriting anything important.
• Tidy access: use SSH keys where possible and remove unused logins.

Let us handle the technical bits for you

Understanding SFTP is genuinely useful, but you did not start a business to spend your evenings wrestling with hostnames, ports and file directories. If moving files, updating your website or keeping everything secure feels like a job for someone else, that someone is very happily us. At Delivered Social we look after the fiddly technical side of websites so you can focus on the work you actually love. Contact us today and let us take the file-transfer faff off your hands.