To upload a website from your computer you need a way to transfer files to the server. The three common protocols sound alike but differ in security and in how you log in.
The three protocols
| FTP | FTPS (FTP over TLS) | SFTP (SSH File Transfer) | |
|---|---|---|---|
| Encryption | None: password and files travel in plain text | TLS encryption, like HTTPS | SSH encryption |
| Port | 21 | 21 (explicit TLS) or 990 | 22 or a custom SSH port |
| Login on cPanel | FTP accounts or cPanel user | FTP accounts or cPanel user | cPanel user with SSH access, or SSH keys |
| Folder restriction | Per FTP account | Per FTP account | The whole home directory |
Which to use
- FTPS is the best default on cPanel hosting: encrypted, and it works with extra FTP accounts limited to one folder. In FileZilla choose Require explicit FTP over TLS; see connect with FileZilla.
- SFTP is ideal if you already use SSH and keys, and for automated deploys; see SSH access and keys in cPanel.
- Plain FTP should be avoided: anyone on the network path can read the password.
Alternatives without a client
- File Manager in cPanel for quick edits and uploading ZIP files; see use File Manager.
- Web Disk to open your hosting as a network drive; see set up Web Disk.
- Git for code deployments; see Git version control in cPanel.
Security tips
- Create a separate FTP account per person and folder, and delete it when the work is done; see create FTP accounts.
- Never save FTP passwords in a client on a shared computer.
- Malware on a PC often steals saved FTP logins, so keep your computer clean.