![\"Cartoon](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/05\/Dev_Man_Padlock.jpg\")
One of the main benefits of using SFTP to transfer your files over other methods is that it encrypts your data.<\/p>\n
Therefore, before we delve into how SFTP works, we must first understand the basics of encryption.<\/p>\n
What is Encryption?<\/h2>\n
Encryption is a method of protecting data by converting it to code or \u2018cipher\u2019 that can only be solved by the people who have permission to view it.<\/p>\n
Simple encryption could be in the form of the A1Z26 cipher, which assigns each letter a numeric value based on their position in the alphabet (A = 1, B = 2), so the word \u2018PASSWORD\u2019, for example, would be converted to 16;1;19;19;23;15;18;4.<\/p>\n
This is a very simple cipher and wouldn\u2019t take a rocket scientist to crack the code.<\/p>\n
With the help of computers, files can be encrypted in virtually uncrackable ways, as machines are able to generate complex, random encryptions that no amount of guesswork would be able to solve.<\/p>\n
The recipient possesses the \u2018key\u2019, which unscrambles the code and allows them to read it.<\/p>\n
A hacker\u2019s goal would be to gain access to plain text data, i.e. data that hasn\u2019t been encrypted.<\/p>\n
If a hacker manages to get their hands on ciphertext (encrypted data) the chances of them being able to decode it and view the information it contains are virtually zero, which is why encryption is so widely used.<\/p>\n
Take Passwords For Example<\/h3>\n
Any website which stores user information should encrypt it in case of a breach.<\/p>\n
When you log into WordPress, you input your password which could be something as simple as \u2018Lilac12<\/strong>\u2019 however WordPress would encrypt it before storing it on the database, so at their end, it could look as complex as ef9ded6169f538c36f9ad613806a7b99<\/strong>.<\/p>\n If a hacker breaches the WordPress database, they wouldn\u2019t be able to access your account unless they were able to transfer the code back into Lilac12 in order to log in.<\/p>\n In theory, the only person who truly knows your password is you!<\/p>\n So, back to SFTP – what is it, and how does it differ from FTP<\/a>?<\/p>\n One of the main distinctions between SFTP and FTP (File Transfer Protocol), is that SFTP is secure whereas FTP is not (I know, who\u2019d have guessed?!)<\/p>\n Let\u2019s say I call you on the phone and we\u2019re having a private conversation.<\/p>\n If someone manages to tap into the line, they hear us speaking English and they will know everything we discuss. This is FTP, as there is no encryption taking place.<\/p>\n If I call you on an encrypted line, all they hear is gibberish, so even if they managed to intercept the connection, it\u2019s encrypted in a way that means they learn nothing from it and the content is useless to them. This is SFTP – the encryption of files protects your data in the event of an interception.<\/p>\n You start the process by logging into an SFTP client to initiate the connection.<\/p>\n The details required include a username, password, host (your site\u2019s URL), and port number, which can all be obtained through your hosting provider.<\/p>\n You can also generate keys that are swapped between the servers, but for the novice user, a username and password is definitely the right way to go.<\/p>\n Once you have authenticated your connection with either of these methods, the files are encrypted and sent to the recipient.<\/p>\n As the files can only be decrypted by the intended recipient, anyone who manages to intercept the connection will only have access to a bunch of jumbled, unreadable files.<\/p>\n Unfortunately, no, they still do.<\/p>\n FTP has been around a very long time – the specification for it was written before the internet was even invented!<\/a><\/p>\n Back then, it was assumed that internet activity wasn\u2019t malicious, and therefore FTP wasn\u2019t created with the need to protect files from various types of hacking methods.<\/p>\n The goal was simply to transfer files from one place to another.<\/p>\n These days, cybersecurity is a huge threat to companies and individuals everywhere, so protecting data should be on the forefront of everyone\u2019s mind when transferring files.<\/p>\n Despite the fact that SFTP is now in existence, millions of people and businesses around the world still use FTP, although some sources suggest that it is dying a slow death.<\/a><\/p>\n If you\u2019re not sending confidential or valuable data, it can be easy to think that FTP will be fine in this instance, as no harm would come from anyone having access to this particular set of files.<\/p>\n Whilst this may technically be true, businesses would always be advised to use a secure method when transferring files regardless of the content.<\/p>\n Luckily, there are tons of regulations in place which prevent businesses from taking risks like this, so the bottom line is SFTP over FTP every time!<\/p>\n With so many acronyms all containing the same few letters, it\u2019s extremely easy to get confused.<\/p>\n So, before we get any deeper, let\u2019s clear up the difference between everything we\u2019ve learnt thus far and the next arrival to the data transfer party – FTPS.<\/p>\n The FTP part of FTPS is indeed the same FTP that we\u2019ve already met – a way to transfer files over the internet, but without the added security that SFTP offers via encryption.<\/p>\n FTPS however, is something slightly different.<\/p>\n Whilst SFTP pairs FTP with an SSH connection in order to securely transfer files, FTPS works with SSL to keep your files safe.<\/p>\n SSL puts the S in HTTPS – it stands for Secure Sockets Layer and is what differentiates a secure site (HTTPS) from an unsecure one (HTTP).<\/p>\n To do this, your browser binds to the website forming a secure connection which is extremely difficult to penetrate.<\/p>\n This is done with the help of an SSL certificate. The browser connects to the website\u2019s server, checks if it has an SSL certificate and if it does and the browser can authenticate it, it forms a binding connection which allows you to safely transfer information.<\/p>\n So now that we\u2019re better versed in the terminology, how do we put this into practice and access our WordPress files?<\/p>\n There are a couple of different ways you can do this.<\/p>\n Some hosting providers supply a platform for you to directly access your files such as C Panel, however, if you don\u2019t have access to anything similar, you can either use a plugin, the command terminal, or an SFTP client.<\/p>\n A plugin File Manager<\/a> allows you to copy and amend your files, however, we wouldn\u2019t recommend this method.<\/p>\n This is because if you change something in your site\u2019s files, one simple syntax error could mean your whole site crashes and you are unable to even get to the dashboard.<\/p>\n If this is a mistake you have made using a plugin, you won\u2019t even be able to get back into the plugin to fix the issue – it\u2019s so much safer to use an external source such as an SFTP client so that you can get straight back in and correct the issue.<\/p>\n So now we\u2019ve settled on SFTP, which client should we use?<\/p>\n There are a number of SFTP clients that you can use to access your files, and most are free.<\/p>\n Popular choices are WinSCP, Cyberduck and FileZilla<\/p>\n For basic users, all that really differs are the interfaces, so we’ll take a quick look at these three below.<\/p>\n First up, Cyberduck!<\/p>\n Not all SFTP clients are a great fit for Mac users, but Cyberduck<\/a> is one of the exceptions.<\/p>\n It has a Mac-like aesthetic which is very beginner-friendly and supports a wide range of servers, so is a good choice for anyone looking to venture into the world of SFTP.<\/p>\n With 132 million downloads in the bag, WinSCP<\/a> is also a great choice for your SFTP needs.<\/p>\n It\u2019s only available for Windows, so it\u2019s designed in a way that makes it quick and simple for Windows users to navigate, i.e. with lots of well-organized, yellow folders.<\/p>\n Like Cyberduck, it\u2019s also completely free to use and you can easily access your files and make changes to your WordPress files using this client.<\/p>\n One of the most popular by far is FileZilla<\/a> – it\u2019s completely cross-platform (even Linux) and again, free.<\/p>\n Below I will take you through how to use FileZilla to download copies of your files from WPMU DEV\u2019s servers.<\/p>\n This quick tutorial should give you a good idea of what you would need to do to access your files from any hosting provider.<\/p>\n Orrrrrr, you could just take a look at all the awesome goodness included with our membership<\/a>, take the plunge and host a site or two on our servers.<\/p>\n First of all, let\u2019s download FileZilla – just head to their site<\/a> and get it installed.<\/p>\n You can now choose whether to keep reading, or follow our quick video tutorial.<\/p>\n stXca0tg4Ak<\/span><\/span><\/p>\n In order to start the connection, you’ll need to enter your credentials as mentioned above.<\/p>\n To create these, you need to go to our website and into the hosting section of the hub<\/a>.<\/p>\n You will find your sites in a list – just choose the one you want and click on \u2018manage\u2019 which will take you to the back-end of your WordPress site.<\/p>\n This will take you to the account creation screen.<\/p>\n Here you need to choose a username and password:<\/p>\n Your password needs to be a series of letters and numbers – and a pretty long one at that!<\/p>\n If your password isn\u2019t sufficiently long enough, you won\u2019t be able to continue – what\u2019s the point in using a secure method of file transfer if your password is simple enough to guess?!<\/p>\n Now you\u2019ve created your credentials, it\u2019s time to head back to Filezilla to set up the connection.<\/p>\n The host is your website address, so enter that along with your username and password that you\u2019ve just created within your hosting hub, and the port number, which is 22.<\/p>\n Click \u2018Quickconnect\u2019 and voila! You now have access to all of your WordPress files.<\/p>\n <\/p>\n All you need to do now is right-click on the file you want to open and select \u201cView\/Edit\u201d.<\/p>\n This will then open the file in your text editor.<\/p>\n You can make the changes you need and then reupload the file back to the host server.<\/p>\n And it\u2019s as simple as that!<\/p>\n The hard part is knowing what to do once you have the files within your reach.<\/p>\n There are tons of CSS tutorials online – check out our handy guide packed full of links to awesome resources<\/a> if you’re hoping to jump into the world of web development languages, or if you just need a refresher. Also, here is another handy dandy tutorial on setting file permissions<\/a> that you may find useful when working with files on your server.<\/p>\n Another way to access your files is through the command line\/terminal.<\/p>\n Be warned – if you have no idea what you\u2019re doing with the command line, then I would strongly advise that you go away, do a bit of research and come back when you\u2019re confident you\u2019re not going to break your site!<\/p>\n I am simply here to show you how to access it via our hosting – what you do with that power is entirely up to you!<\/p>\n Unlike many hosting companies, for an added layer of security, websites hosted on our servers have one set of credentials for SFTP and one for SSH.<\/p>\n If all you want to do is download, make changes to your files and then reupload them, you can do this through SFTP.<\/p>\n If you want to do the more admin-y things such as add users or change settings, you will need to access the server via SSH<\/a> instead.<\/p>\n It is a very similar process, however, you would need to head back over to the hosting hub and create an SSH user in the same way you did an SFTP one.<\/p>\n As before with FileZilla, using SFTP through the command line opens up a secure connection that allows files to be transferred over the internet.<\/p>\n If you\u2019re on a Windows machine, you simply open up the command line by hitting Win+R and then typing in \u201ccmd\u201d. If you\u2019re on Mac, head to \u2018Terminal\u2019 in your applications.<\/p>\n <\/p>\n You then need to establish the connection to your site by typing in the following:<\/p>\n sftp (your sftp username)@(your website address)<\/p>\n So in this example, mine would be sftp kirstan@kirstan.wpmudev.host<\/p>\n This is telling the server that I want to log in via SFTP with the account name \u2018kirstan\u2019 into my kirstan.wpmudev.host website.<\/p>\n It will then ask for your password – once you have entered this, you will have remote access to your files.<\/p>\n Right, so we\u2019re in!!<\/p>\n Now we can download copies of our WordPress files by simply inputting a few commands and hitting enter each time.<\/p>\n First, we type in \u201cls\u201d so that we\u2019re navigating within the server rather than our local machine.<\/p>\n Then you can navigate around the folders by using the \u201cls\u201d command which will show you the list of folders and documents inside the folder you\u2019re currently in, and \u201ccd\u201d which will take you to the folder you specify.<\/p>\n Let\u2019s take a quick look below:<\/p>\n I am now inside the public_html folder and as you can see from above, I navigated here by typing in \u201ccd site\u201d, using \u201cls\u201d to check the names of the folders and then typing \u201ccd public_html\u201d.<\/p>\n Each time you input a command, remember to hit enter so that it can be processed!<\/p>\n Your WordPress files are always organized in the same series of folders and subfolders no matter which method you choose to access them.<\/p>\n If I wanted to download my theme\u2019s stylesheet, I would head into wp content>themes>twentynineteen.<\/p>\n I navigated to the theme\u2019s files by using the \u201cls\u201d and \u201ccd\u201d commands, and now I\u2019m ready to download the file I need.<\/p>\n I typed \u201cget stylesheet.css\u201d and was able to easily download a copy of the file directly to my downloads folder:<\/p>\n Once you\u2019ve learned the list of commands, you’ll be able to navigate your way through your WordPress site this way like it\u2019s second nature.<\/p>\n If this is something you fancy getting to grips with, you can check out this \u2018cheat sheet\u2019<\/a> of some of the most frequently used SFTP commands.<\/p>\n Now that you know how to get your hands on your files, you can start to think about what you\u2019ll do with this new power.<\/p>\n If you fancy unleashing your imagination and customizing your perfect theme or you just want to find out a bit more about how the PHP behind WordPress really works, check out these recommended WordPress developer courses<\/a>.<\/p>\n Or, if you’re the type of person that likes to ‘get stuck into it boots and all’ and try things out for yourself, sign up for our no-risk membership free trial<\/a> and check out our secure file transfer tools and more in the [humblebrag alert!] best managed WordPress hosting on the planet<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" You\u2019ve just installed a brand new theme for your new site. You load it up and begin to admire it – it\u2019s perfect! Except…what\u2019s that weird orange tint on all of your photos?! How do you get rid of it? It\u2019s time you unlocked the world of SFTP\u2026 It\u2019s often said that you can build […]<\/p>\n","protected":false},"author":801248,"featured_media":187092,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"blog_reading_time":"15","wds_primary_category":0,"wds_primary_tutorials_categories":0,"footnotes":""},"categories":[557,263],"tags":[],"tutorials_categories":[11233],"class_list":["post-187067","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-development","category-tutorials","tutorials_categories-hosting"],"_links":{"self":[{"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/posts\/187067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/users\/801248"}],"replies":[{"embeddable":true,"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/comments?post=187067"}],"version-history":[{"count":22,"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/posts\/187067\/revisions"}],"predecessor-version":[{"id":187620,"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/posts\/187067\/revisions\/187620"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/media\/187092"}],"wp:attachment":[{"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/media?parent=187067"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/categories?post=187067"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/tags?post=187067"},{"taxonomy":"tutorials_categories","embeddable":true,"href":"https:\/\/wpmudev.com\/blog\/wp-json\/wp\/v2\/tutorials_categories?post=187067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}SFTP v FTP<\/h2>\n
How Does SFTP Work?<\/h3>\n
So I Guess This Means No One Uses FTP Anymore?<\/h3>\n
What About FTPS – Where Does That Come Into It?<\/h2>\n
“What Is SSL?!” I Hear You Cry<\/h3>\n
How Can I Access My Files Using SFTP?<\/h2>\n
Choosing an SFTP Client<\/h2>\n
Cyberduck<\/h3>\n
![\"Screenshot](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/cyberduck-sftp-client.png\")
WinSCP<\/h3>\n
![\"Screenshot](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/WinSCP-sftp-client-2.png\")
FileZilla<\/h3>\n
![\"Screenshot](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/Filezilla-screenshot.png\")
Not a WPMU DEV Member?<\/h3>\n
Using FileZilla To Access Your Files<\/h2>\n
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/hosting-manage.png\")
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/SFTP-SSH-top-bar.png\")
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/Add-SFTP-user.png\")
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/sftp-user-create-credentials-1.png\")
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/Filezilla-enter-credentials.png\")
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/Filezille-file-list.png\")
![\"Showing](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/Filezilla-opened-file.png\")
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/Filezilla-reupload-file.png\")
Ready To Step It Up A Notch?<\/h2>\n
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/sftp-command-line.png\")
![\"Credentials](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/sftp-command-line-with-credentials.png\")
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/sftp-ls-site.png\")
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/sftp-ls-cd-navigation.png\")
![\"INside](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/sftp-twentynineteen-folder.png\")
![\"The](\"https:\/\/wpmudev.com\/blog\/wp-content\/uploads\/2020\/04\/sftp-file-download.png\")
Congratulations – You\u2019ve Just Unlocked The Next Level of WordPress!<\/h2>\n