Web Hosting
How to Use SFTP with FileZilla 2026
SFTP is the secure way to move themes, plugins, and wp-config snippets without exposing passwords over FTP. This guide uses FileZilla. The same steps apply to other clients.
Before a procedural walkthrough ships, every step runs on at least two brands when the task is host-specific, or twice on the same stack on different days when it is not. Console errors are captured, UI label drift between regions is noted, and copy is revised the moment a vendor moves a button. Screenshots and paths are spot-checked quarterly. Security-sensitive actions (DNS, SSL, billing) trigger recovery-option checks plus links to the host's own documentation for authoritative wording.
In cPanel/hPanel → FTP Accounts or SSH/SFTP section, create a user scoped to public_html (or the site root). Note host, username, password.
File → Site Manager → New Site. Protocol: SFTP. Host: your server hostname. Port: 22 (unless host specifies otherwise). Logon type: Normal.
On first connect, verify the host key fingerprint against your host's documentation, then accept.
Remote pane: open the web root where wp-config.php lives. Local pane: your computer project folder.
Drag to upload; keep backups before overwriting. Set file permissions per host docs. Typically 644 files, 755 folders.
Close the connection when finished. idle sessions may hit security limits.