Technical Anshu
Tutorials Blog
Protocol Basics

SFTP vs FTP vs FTPS The Three Protocols Explained Simply

Three names that differ by one letter, three very different levels of safety. This page separates FTP, FTPS and SFTP once and for all - what each one encrypts, which ports each one needs, and which one you should actually run.

By Technical AnshuWindows 10 / 117 minute read
Watch the full video above - Create an SFTP Server in 60 Seconds by Technical Anshu

The confusion is understandable. FTP is the old original from 1971. FTPS is that same FTP wrapped in TLS encryption. SFTP is not FTP at all - it is a file transfer protocol that rides inside SSH, the same secure shell used to administer servers. The video makes the point directly: plain FTP has no data security and is not recommended in banking environments, while SFTP is what gets used there. Here is the full picture.

FTP vs FTPS vs SFTP - the honest comparison
FTP - port 21 - password and files in clear textDo not use
FTPS - FTP plus TLS certificate - ports 21 or 990 plus data portsEncrypted
SFTP - SSH based - single port 22 - fully encryptedRecommended
SCP - also SSH - copies files but no folder browsingNiche
Only one of these was designed encrypted from the start - SFTP.
1

Plain FTP Sends Everything in the Open

FTP logs you in and moves files with no encryption at all. The username, the password and every byte of the file cross the network as readable text. Anybody positioned on the path - a compromised router, a snooping tool on the same network - can read or copy them. That is not a theoretical flaw; it is simply how the protocol was designed in a friendlier era. On a trusted home LAN the risk is lower, but there is rarely a reason to accept it today when the encrypted options cost nothing extra.

2

FTPS Is FTP Wearing a TLS Coat

FTPS keeps the original FTP commands and adds a TLS certificate, like HTTPS does for websites. The login and data can be encrypted, which fixes the clear-text problem. But FTP was built with separate control and data connections, and the data side opens additional ports that change per transfer. Through firewalls and NAT routers that design is fiddly: passive port ranges must be opened and forwarded correctly or transfers fail in confusing ways.

3

SFTP Is a Different Protocol Entirely

Despite the similar name, SFTP shares no code and no design with FTP. It is the SSH File Transfer Protocol: one single connection on port 22, the same port and the same encryption as an SSH login. One port means one firewall rule and no passive-port headaches. Your identity is checked with a password or, better, an SSH key pair, and the server proves itself with a host key your client remembers. This is the protocol the video builds on Windows using the OpenSSH Server.

4

Which One Should You Choose

  1. New setup on your own machines - SFTP, every time
  2. A bank, client or old system specifically demands FTPS - use FTPS with a valid certificate and a fixed passive port range
  3. Plain FTP - only for anonymous public downloads of files that are not private, never with a real password
  4. Quick one-off copy to a Linux machine - SCP works, but SFTP clients do the same job with browsing and resume

Watch the Full Video

See the complete SFTP server setup on screen, step by step, in the Technical Anshu video.

Watch Full Video
Frequently Asked Questions

Is SFTP just FTP with encryption added?

No. SFTP is a separate protocol built on SSH and shares nothing with FTP except the job it does. FTPS is the one that adds encryption (TLS) to the original FTP.

Why does SFTP need only one port while FTP needs several?

SFTP multiplexes everything - login, commands and file data - inside a single SSH connection on port 22. Classic FTP opens separate data connections, which is why it needs port 21 plus a range of passive data ports through the firewall.

Can a FileZilla FTP setup be switched to SFTP?

The client is the same program, but the server side is different software. On Windows you would run the OpenSSH Server for SFTP, then in FileZilla choose the SFTP protocol and port 22 instead of FTP and port 21.

This guide is based on the Technical Anshu SFTP server video - Stuck on a step? Ask in the video comments and you will get a reply.