Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For security reasons (since FTP transmits passwords and files in plain text), I want to force users of my shared hosting to use FTPS or SFTP instead of regular FTP.

I am using WHM but have limited account (no root access). What options do I have to enforce all FTP connections are secure?

share|improve this question

For FTP over TLS (FTPS), from the cPanel & WHM 11.38 Documentation:

To configure your ProFTP server:

Next to TLS Encryption Support, select whether you wish for TLS encryption for FTP connections to be Optional or Required.

To configure your Pure-FTP server:

Next to TLS Encryption Support, select 1 of the following options:

Disabled — Disables TLS encryption.
Optional — Allows your users to specify whether they wish to use TLS encryption.
Required (Command) — Requires TLS encryption on all commands being issued to the FTP server. This will help to protect login and password information.
Required (Command/Data) — Requires TLS encryption on both commands being issued to the FTP server and data coming to and from the FTP server. This will protect both passwords and files being exchanged between client and server.

Select "Required" for ProFTP, or "Required (Command)" at minimum for Pure-FTP, depending which FTP server you have installed.

This should be located here:

Home >> Service Configuration >> FTP Server Configuration

FTP clients will then need to be configured to connect over "TLS/SSL".

Note: if this is not available based on your account permissions, then you'll have to upgrade to an account that does have this permission, a VPS, or a dedicated server.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.