Creating and Using an FTP/SFTP Account

FTP and SFTP accounts let you (or a developer) upload and manage website files using a dedicated client like FileZilla instead of the browser-based File Manager — much better for large sites, ongoing development, or giving a third party limited access without sharing your main cPanel login.

FTP vs SFTP

SFTP (SSH File Transfer Protocol) encrypts the entire connection, including your login credentials, and is the recommended option wherever it's available. Plain FTP sends data unencrypted and should only be used if a specific tool requires it, ideally over FTPS (FTP with SSL/TLS). Hoststack shared and reseller accounts support both.

Creating an FTP account in cPanel

• Log in to cPanel and open FTP Accounts under the Files section
• Enter a username, a strong password, and the specific directory this account should have access to — scope it to a single folder (e.g. public_html/client-site) rather than the whole account when giving access to a third party
• Set a quota if you want to cap how much space that account can use, and click Create FTP Account
• Your main cPanel login already works as a full-access FTP/SFTP account by default — you only need a new one for restricted or additional access

Connecting with FileZilla

• Host: your server IP address or sftp://yourdomain.com
• Port: 22 for SFTP, 21 for FTP/FTPS
• Username/Password: the FTP account credentials you just created
• In FileZilla's Site Manager, set Protocol to "SFTP - SSH File Transfer Protocol" for the encrypted option, then click Connect

Good practice

Delete or disable FTP accounts you no longer use, and rotate passwords periodically — an old, forgotten FTP account with a weak password is a common way sites get compromised. Never reuse your cPanel password for a third-party FTP account.