How do you connect to a website using FTP or SFTP?

Obtain the server hostname, username, password or SSH key, port, and starting directory from the hosting provider. Enter them into a client such as FileZilla, Cyberduck, or WinSCP. Use the provider’s server hostname when the domain is new or its DNS does not yet point to the hosting account.

Choose SFTP whenever it is available. SFTP runs over SSH and encrypts login details and file transfers. Traditional FTP sends data without this protection unless it is configured as FTPS. SFTP and FTPS are different protocols, so selecting the wrong one or using its port with another protocol will fail.

The first SFTP connection may display the server’s host key fingerprint. Compare it with the value supplied by the host before accepting it. Once connected, locate the correct document root and download a backup of any file you plan to replace. Do not assume the first folder shown by the client is the live website.

Store credentials in a password manager and create a separate account for each person when the host allows it. Limit an account to the directory it needs and remove it when the work ends. For automated deployments, use a dedicated SSH key with restricted permissions instead of saving an administrator password in a script.