# FTP and SFTP: definition

> FTP and SFTP are two protocols for transferring files between a computer and a web server; SFTP encrypts the connection, unlike plain FTP.

- Source canonique : [https://allaux.fr/en/glossaire/ftp-sftp](https://allaux.fr/en/glossaire/ftp-sftp)
- Langue : EN
- Dernière mise à jour : 2026-09-30

## A difference that matters for shop security

FTP (File Transfer Protocol) sends files, but also the username and password, in plain text over the network. SFTP (SSH File Transfer Protocol) routes this traffic through an encrypted tunnel over SSH, which prevents credentials from being intercepted. For a shop that handles sensitive files (theme, modules, configuration files containing database access details), transferring over unencrypted FTP exposes this information to anyone listening on the traffic, for example on public Wi-Fi.

That's why most hosts now offer SFTP by default. In practice, usage stays the same in a client like FileZilla: only the protocol and connection port change, with SFTP using port 22 (SSH) instead of FTP's port 21.

## Avoid

> Connecting over plain FTP on a public network (cafe, airport) to edit files on a live shop exposes the server's access credentials in plain text.

## FAQ

### How do I know if my host offers SFTP?

This information appears in the access details provided when the hosting was set up, usually under "SFTP access", with a dedicated port typically numbered 22.

### Do FTP and SFTP give access to the same files?

Yes, both protocols transfer files to the same hosting space; only the connection's security differs, not the accessible content.

### Is SFTP enough to fully secure access to a shop?

No: you also need strong passwords, access limited to the people who need it, and ideally SSH key authentication rather than a password alone.