The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →To connect to a WordPress site, use an FTP/SFTP client with the server hostname, protocol, port, file-transfer username, and password or SSH key supplied by your hosting provider. Choose SFTP (or FTPS) whenever it is available: ordinary FTP sends your credentials and files in clear text. After authentication, open the site’s installation directory—the folder containing wp-config.php—before you upload, replace, or remove anything.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
What you need before opening an FTP connection
Your WordPress dashboard login is not an FTP login. The dashboard authenticates to WordPress; an FTP client authenticates directly to the hosting server. Obtain a separate file-transfer account from your host or create one in the hosting control panel.
As an Amazon Associate I earn from qualifying purchases.
Recommended Free Tools
Collect these five connection details
| Field | What to enter | Where it comes from |
|---|---|---|
| Host | The exact server name or IP address supplied by the host. Do not add a trailing slash unless the host specifically tells you to. | Hosting welcome email, control panel, or support team |
| Protocol | SFTP, FTPS, or FTP, matching the service enabled for the account. | Host’s account documentation |
| Port | Use the host’s stated port. WordPress documentation commonly lists 22 for SSH/SFTP and 21 for FTP, but a host may use a custom port. | Host’s account documentation |
| Username | The file-transfer account name, which may differ from your WordPress administrator name. | Control panel or host |
| Password or key | A case-sensitive password, or an SSH private-key configuration when the account requires key authentication. | Control panel or host |
If your hosting account contains several websites, ask which account and directory belong to the production site. A staging site can look almost identical in a file browser, and changing the wrong copy will not fix the live site.
Where to get or create the account
Check the hosting welcome message and control panel for a section named FTP accounts, SFTP users, SSH access, or file access. If the host has not created a user, create one there or ask support to do it. Give the account access only to the intended site directory when the panel supports directory scoping. Record the hostname, protocol, port, and directory together so a production account is not confused with a staging account.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Some hosts expose SFTP only after SSH access is enabled, while others provide a separate SFTP user. Confirm the authentication method before creating a profile: the account may use a password, an SSH private key, or a custom SSH port. If you are considering a new hosting plan, look for an explicit SFTP option and a control panel that can create restricted file-transfer accounts; pricing and included features vary by provider, so verify them on the host’s plan page.
FTP, SFTP, and FTPS: which protocol should you choose?
FTP (File Transfer Protocol) has no encryption. Usernames, passwords, directory listings, and transferred files can be exposed while they travel across the network. WordPress Developer Resources explicitly recommends an encrypted alternative whenever possible.
| Protocol | Encryption | Typical documented port | What to know |
|---|---|---|---|
| FTP | None; credentials and data are sent in clear text. | 21 | Use only when the host provides no encrypted option and the connection is otherwise controlled. It is not the preferred choice for administering a site. |
| SFTP | Encrypted through SSH. | 22 | SFTP is a separate protocol from FTP. It can use a password or an SSH key, and the host may require a nonstandard SSH port. |
| FTPS | FTP protected by TLS. | Host-specific | FTPS is not the same as SFTP. Select the FTPS mode and port your host documents; an SFTP port will not work for FTPS. |
Do not assume that an FTP password works for SFTP, or that an FTP account is automatically enabled for an SSH connection. Ask the host which protocol the account supports. The 21 and 22 values are common conventions documented by WordPress, not guarantees.
Connect with FileZilla
FileZilla provides a graphical local-and-remote file browser. The following workflow uses its Site Manager so the settings can be saved and reused.
- Get or create the account. Ask your host for the hostname, protocol, port, username, and password or SSH-key requirements. If no file-transfer account exists, create one in the hosting control panel and restrict it to the intended site directory when the panel offers that option.
- Install and open FileZilla. Use the current release from the project’s official distribution channel, then open the application.
- Open the Site Manager. Choose File → Site Manager → New Site.
- Enter the host exactly as supplied. In the General tab, type the server name in Host. Do not append
/. Select SFTP – SSH File Transfer Protocol whenever the host supports it. - Set the port. Enter the host’s port rather than relying on an automatic default. WordPress documentation describes 22 as the common SSH/SFTP default and 21 as the common FTP default; managed hosts frequently change these values.
- Choose the logon type. Select the option that matches the account. Enter the full username and a password when password authentication is enabled. If the host requires a key, choose the key-file option and select the private key requested by the host. Passwords are case-sensitive.
- Save and connect. Save the site profile, then click Connect. Saving avoids retyping a long hostname or custom port, but protect the computer and profile because anyone who can use a saved password may be able to modify the site.
- Check the server fingerprint. On a first SFTP connection, FileZilla may display a host-key or fingerprint prompt. Compare the fingerprint with the value supplied by your host. Accept it only when the values match; do not approve an unexpected key simply to clear the warning.
- Identify the two panes. The local computer appears on the left and the remote server on the right. A successful login normally shows remote directories rather than another login form.
- Open the WordPress installation root. Browse the remote pane until you find
wp-config.php. That directory is the installation root for that site. Common parent folders have names such aspublic_html,www, or a domain-specific folder, but use the directory containing the site’s ownwp-config.phprather than guessing from a folder name.
Uploading or downloading a file
In the remote pane, open the destination directory and in the local pane open the source directory. Drag a file or folder between panes, or use the context-menu upload and download commands. Wait for the transfer queue to report success before closing the client. If a file already exists, read the overwrite prompt carefully; replacing a production file is difficult to undo without a backup.
Download a copy of a file before replacing it when the client allows that, and keep the original clearly labeled with the site and date. Transfer only the files required for the task. Uploading an entire unrelated WordPress tree can overwrite working plugins, themes, or configuration files and makes it harder to identify the cause of a failure.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Connect with Cyberduck
Cyberduck uses bookmarks instead of FileZilla’s Site Manager, but the required values are the same.
- Open Cyberduck and choose New Bookmark.
- Choose SFTP (SSH File Transfer Protocol) when that is the service your host provides.
- Enter the server, port, username, and password. Configure the private-key file instead if the host requires SSH-key authentication.
- Save the bookmark and open it.
- When Cyberduck presents a server fingerprint, compare it with the fingerprint from your host and allow the key only after it matches.
- Browse to the directory containing
wp-config.phpbefore transferring files.
If the host offers only FTP or FTPS, select that exact bookmark protocol and the corresponding port. Choosing SFTP in Cyberduck cannot connect to an FTP-only account.
Find the correct WordPress directory
The installation root is the remote directory where wp-config.php resides. It also normally contains folders such as wp-admin, wp-content, and wp-includes. The names of the parent directories differ by host, so do not treat public_html or www as universal rules.
When one account contains several sites
- Match the domain or document-root name shown in the hosting panel to the folder you open in the client.
- Confirm that the folder’s
wp-config.phpbelongs to the intended environment before editing anything. - Keep production and staging bookmarks or local notes clearly labeled, including the hostname and directory.
- If the account is scoped to one site, a permission error when browsing elsewhere may be expected rather than a sign that the connection failed.
Back up before changing server files
Make a current backup of both the WordPress files and the database before uploading, replacing, or deleting anything. An FTP download alone is not a complete WordPress backup because posts, settings, users, and plugin data live in the database.
- Export or otherwise back up the site’s database through the method supplied by your host.
- Download the WordPress files, or use the host’s backup system to capture the complete file set.
- Record the backup date, the site or staging environment, and where the backup is stored.
- Only then transfer the planned file, keeping the original copy when the client offers a download or rename option.
- After the change, load the site and its key administrative screens. If it fails, restore the affected file and database backup rather than deleting additional files at random.
File permissions and account scope
A successful login does not guarantee write access to every directory. The transfer account may be limited to a particular site, and the web server may own files that the account can read but not modify. Keep permissions as restrictive as practical: broad write access on shared hosting increases the damage an exposed credential could cause.
When a transfer returns “permission denied,” ask the host to correct the account’s directory scope or ownership. Do not solve the problem by broadly loosening permissions across the site. That can make unauthorized modification easier and may still fail if the server uses a different owner or security policy.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Protect saved profiles and keys
A saved FileZilla site or Cyberduck bookmark is convenient, but it contains information that can lead back to the server. Protect the computer used for administration, avoid saving credentials on a shared or public machine, and secure any private-key file according to the host’s instructions. Do not send a private key or password through an untrusted channel. If access must be handed to another administrator, create or request a separate host account instead of sharing the WordPress dashboard login or one person’s key.
Use encrypted SFTP or FTPS whenever the host supports it. Encryption protects the connection in transit, while a verified fingerprint helps ensure that an encrypted session is reaching the intended server. These controls complement backups and restricted directory permissions; none replaces the others.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsTroubleshoot the common connection errors
No connection attempt or an immediate failure
Recheck the hostname, protocol, and port character by character. One incorrect character, an omitted custom port, or choosing FTP when the account is SFTP-only can prevent the client from reaching the service. Copy the values from the host’s account page instead of guessing.
“Incorrect login” or “user does not exist”
Compare the username, password, protocol, and port with the file-transfer account details. Passwords are case-sensitive. Confirm that the account is active and that you did not enter your WordPress /wp-admin/ username in place of the hosting account username.
“Could not retrieve directory listing”
For an FTP connection, open the client’s transfer settings and select Passive transfer mode, then retry. Firewalls and network address translation can block the active-mode data channel even when the initial login succeeds. If the host requires a specific passive-port range, ask support for that setting rather than opening unrelated ports.
SFTP authentication failure
Ask the host whether the account requires a password or an SSH private key, and whether it uses a custom SSH port. In FileZilla, verify that the selected logon type and key file match the account. An FTP password cannot authenticate an account configured for key-only SFTP access.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Permission denied after connecting
The account may not have write permission for that directory. Confirm that you are in the intended site root and then ask the host to correct the account scope, ownership, or permissions. Avoid recursively changing permissions just to force an upload.
An unfamiliar host-key warning appears
Stop and verify the fingerprint with the host through a trusted support channel. A changed key can be legitimate after a server migration, but accepting an unverified key removes an important protection against connecting to the wrong server.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.FileZilla and Cyberduck compared
| Consideration | FileZilla | Cyberduck |
|---|---|---|
| Connection setup | File → Site Manager → New Site; profiles are stored in Site Manager. | New Bookmark; saved bookmarks hold the connection details. |
| SFTP and FTPS/FTP | Supports choosing the protocol and port in the site profile. | Supports protocol-specific bookmarks with the matching server and port. |
| Password or SSH key | Choose the logon type and enter a password or configure the host’s private key. | Enter a password or select the private key required by the host. |
| Directory-listing control | Transfer Settings includes Passive mode for FTP troubleshooting. | Use the protocol and connection settings supplied by the host; FTP data-channel behavior depends on the selected mode and network. |
| Operating-system availability | Availability depends on the current release and operating system supported by the project. | Availability depends on the current release and operating system supported by the project. |
| Host-key verification | Shows a fingerprint or host-key prompt during an SFTP connection. | Shows a server-fingerprint prompt when opening an SFTP bookmark. |
Neither client changes the security properties of the protocol. A graphical interface is convenient, but SFTP remains encrypted because it uses SSH, while plain FTP remains unencrypted regardless of which client displays it.
A safe repeatable workflow
- Confirm the production or staging target and obtain the host-issued connection details.
- Prefer SFTP, or FTPS when SFTP is unavailable; use plain FTP only when there is no encrypted option.
- Verify the host key or fingerprint on the first encrypted connection.
- Open the directory containing the intended site’s
wp-config.php. - Back up the files and database before making a change.
- Transfer the smallest necessary file set and watch the queue for completion.
- Test the site, then keep the backup and connection profile protected.
Frequently Asked Questions
How do I connect to my WordPress site using FTP?
Get the host-issued hostname, protocol, port, file-transfer username, and password or SSH-key requirements. Enter them in FileZilla’s Site Manager or Cyberduck’s New Bookmark, connect, verify the server fingerprint if using SFTP, and open the remote directory containing wp-config.php.
What is the difference between FTP and SFTP for WordPress?
Plain FTP sends credentials and files without encryption. SFTP is a separate SSH-based protocol that encrypts the connection. FTPS is FTP protected by TLS. Use the encrypted protocol your host actually provides; an FTP account, password, or port is not automatically valid for SFTP.
Where do I find my FTP host, port, username, and password?
Look in the hosting welcome email or control panel, or ask the hosting provider. The file-transfer username and password are separate from your WordPress /wp-admin/ credentials. Common documented ports are 21 for FTP and 22 for SFTP, but your host may assign a custom port.
Why does FileZilla say it cannot retrieve the directory listing?
For FTP, open the transfer settings and select Passive mode, then retry. Active-mode data channels can be blocked by a firewall or network address translation. If the host requires a particular passive-port range, ask support for its documented setting.
Can I use my WordPress administrator password in FileZilla?
Usually not. WordPress administrator credentials authenticate to the application, while FileZilla authenticates to a hosting-server file-transfer account. Use the FTP, SFTP, or SSH credentials supplied or created in the hosting control panel.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWhy can I connect but not upload?
The account may be restricted to another directory, or the server may own the files while your account has read-only access. Confirm that you are in the correct site root, then ask the host to correct the account scope, ownership, or permissions. Do not broadly loosen permissions as a shortcut.
Do I need to back up the database before using FTP?
Yes. FTP or SFTP transfers files, but WordPress posts, settings, users, and plugin data are stored in the database. Back up both the complete file set and the database before replacing or deleting server files.
How much does FTP or SFTP access cost?
There is no universal price. Check whether your hosting plan includes SFTP access and a control panel for creating file-transfer accounts; any plan cost or upgrade requirement is specific to the provider.
Should I accept a first-time SFTP fingerprint warning?
Only after comparing the displayed fingerprint with the value supplied by your host through a trusted channel. Accepting an unverified key can allow a connection to the wrong server, even when the login otherwise appears to work.
Free tools Windows power users keep installed
One-click scans. No signup required.
The Bottom Line
Use the host’s exact hostname, protocol, port, username, and password or SSH key; prefer SFTP or FTPS over plain FTP; verify the server fingerprint; and work only in the WordPress directory containing the intended site’s wp-config.php. Back up both files and the database before making changes, and ask the host to fix account scope or permissions instead of weakening security.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
