FTP accounts let you (or someone else) upload and manage files without giving out your main cPanel login — useful for developers, designers, or automated deployment tools that only need file access.
Creating an FTP account
- Go to Files > FTP Accounts.
- Enter a username (it will be combined with your domain, e.g.
dev@yourdomain.com) and a strong password. - Set the Directory — this is the key security setting. Point it at a specific subfolder (e.g.
public_html/client-site) rather than the account root, so the account can only see and modify files inside that folder. - Set a disk quota if you want to cap how much this account can store.
- Click Create FTP Account.
Connecting with an FTP client
Give whoever needs access: the host (your domain or server IP), the full username, the password, and the port (21 for standard FTP, or use SFTP on port 22 if your setup supports it — SFTP is preferred since it’s encrypted, while plain FTP sends credentials and files unencrypted).
FTP vs SFTP
Standard FTP transmits everything, including your password, in plain text — fine on a fully trusted local network, risky over the open internet. SFTP (FTP over SSH) encrypts the entire session. If your hosting supports SFTP, prefer it, especially for any account a third party will use from an unknown network.
Managing and removing access later
The same FTP Accounts page lists every account, with options to change the password, change the quota, or delete the account entirely — deleting immediately revokes access without needing to change any other credentials on the main account.
A good habit for contractor access
Create a dedicated FTP account scoped to only the relevant folder for every external developer or contractor, and delete it once their work is done, rather than sharing your own login or leaving old accounts active indefinitely.