The script installs your SFTP server in under a minute. That is real - and it is also where most people stop, one step before the server is actually safe. This page is the honest second half of the job.
Speed is the point of the video, and the install genuinely is fast. But an installer can only make default choices, and defaults are chosen for convenience, not for your network. The five checks below take about five minutes. None of them is optional if other people will connect to this server, and each one closes a hole that the one-minute timer quietly skips.
The script asks you to type a username and password in step 2, and whatever you type becomes the only lock on the door. A short or reused password undoes all of SFTP's encryption - the tunnel is strong, but anyone who guesses the password walks through it legitimately. Use at least 12 characters, make it unique to this server, and store it in a password manager. If the same password protects your email or Windows sign-in, change it now.
A shared login destroys accountability: when a file is deleted or leaked, the log shows the shared name and nothing more. Create a separate user for each person through the same step 2 flow. Just as important, keep these users as standard users. An SFTP account that is also a Windows administrator hands over far more than a folder if its password ever leaks.
The install opens TCP port 22 for incoming connections. On a home or office LAN that is fine. If this PC also sits behind a router with any port forwarding, tighten the rule so only your own subnet can reach it. In Windows Defender Firewall with Advanced Security, open the OpenSSH Server (sshd) rule, go to the Scope tab and set Remote IP address to your local range, for example 192.168.1.0/24. Connections from anywhere else are then refused before a password is even asked.
OpenSSH on Windows is serviced through Windows Update and the optional-feature channel, so a PC that never updates also never receives SSH security fixes. Leave automatic updates on. And know the off switch for the days you do not need the server at all: in PowerShell, Stop-Service sshd stops it and Start-Service sshd brings it back. A server that only runs when needed has a much smaller window for trouble.
See the complete SFTP server setup on screen, step by step, in the Technical Anshu video.
Watch Full VideoThe script installs and starts a standard OpenSSH Server with workable defaults. Password strength, who gets an account, firewall scope and updates are decisions about your network that no installer can make for you - and they are the difference between running and running safely.
Yes. Edit the OpenSSH Server (sshd) inbound firewall rule, open the Scope tab and set the remote IP range to your local subnet such as 192.168.1.0/24. Attempts from outside that range are blocked at the firewall.
No. A standard user with access to its own folder is enough for file transfer. Administrator rights add risk without adding any file-transfer benefit.