Where can I find the FTP/SFTP credentials?
You manage your FTP users in the hosting.fr client interface as follows:
- Select “Products” from the left menu.
- In the “Products” menu, select the “Web Hosting” sub-item.
- Navigate to the “Web Spaces” sub-item and select “Show all”.
- In the “Web Space Name” column, under the corresponding web space, select “Show details”.
- Navigate to the “FTP/SSH/Statistics Users” sub-item and select “Show all”.
- Next to the “Users” section, select “Edit”.
- Next to the corresponding FTP user, select the edit button.
- Now make the desired changes.
- The username cannot be changed.
- In the “New password” menu item, you can either set a new password yourself or generate it via the key icon next to the input field if needed.
The new password must be entered a second time for confirmation. For an automatically generated password, you have the option to copy it to the clipboard with a simple click.
For security reasons, it is not possible to read the previously used password. - In the “Access rights” menu item, you manage the FTP user’s permissions.
Assign either “FTP” right for full access to the web space, or “FTP (restricted)” for limited access that only allows access to a directory you define.
For access via SSH or SFTP, assign the “SSH” right. (This is not possible with restricted FTP access.)
If you want to view access statistics, assign the FTP user the “Statistics” right. (This is not possible with restricted FTP access.)
- The username cannot be changed.
- Once all changes are complete, confirm them via the “Save” field.
Understanding the Difference Between FTP and SFTP
FTP (File Transfer Protocol) and SFTP (SSH File Transfer Protocol) both allow you to transfer files to and from your server, but the way they handle data differs significantly. FTP sends information in plain text, which means usernames, passwords, and file contents can potentially be intercepted by malicious actors during transmission. In contrast, SFTP encrypts both the authentication process and the data itself, providing a secure channel for transfers. Choosing SFTP over FTP is highly recommended, especially for business websites or when handling sensitive files. Additionally, many hosting providers now default to SFTP for increased security and compliance with modern standards.
Best Practices for FTP User Management
Managing FTP users carefully improves security and organization.
Key points to follow:
- Create separate accounts for each user instead of sharing credentials.
- Assign directory-specific permissions so users only access what they need.
- Use strong passwords and change them regularly.
- Disable unused accounts to reduce potential attack surfaces.
- Monitor login activity to detect unusual access patterns.
How to Troubleshoot Common FTP Issues
Even with proper setup, FTP connections can occasionally fail, and understanding the causes can save time. Some of the most frequent issues involve incorrect login credentials, firewall restrictions, or server settings such as port numbers and passive versus active mode. Network issues, ISP restrictions, or software conflicts on the client side can also interfere with connections. A systematic approach, verifying credentials, checking port settings, and ensuring firewall rules allow traffic, usually resolves most problems. Consulting the hosting provider’s documentation or support can help troubleshoot more complex scenarios, such as TLS/SSL certificate mismatches or server-side permission issues.
Why Regular FTP Security Audits Are Important
FTP user accounts are often overlooked once they’re set up, but neglecting security can leave your website vulnerable. Regular audits help ensure that all accounts have strong passwords, that unused accounts are disabled, and that directory permissions are appropriately restricted. Monitoring login activity for unusual patterns can also alert you to potential intrusions before damage occurs. In addition, periodically reviewing the overall FTP setup ensures that outdated software versions or insecure configurations are addressed, reducing the risk of unauthorized access and protecting the integrity of your files and website.
Please always use the domain name without “www.” as the server name.