Managing FTP Accounts in cPanel

FTP accounts allow external users or applications to upload, download, and manage files within specific directories of a hosting account. cPanel provides tools to create, modify, and remove FTP accounts while controlling access scope and storage limits.

Understanding FTP access

The File Transfer Protocol is a standard method for transferring files between a local computer and a web server. Access is typically performed using an FTP client application. FTP accounts in cPanel are commonly used to grant limited file access without sharing the main cPanel credentials.

Because FTP users can modify files, careful permission and directory assignment is required on cPanel hosting environments.

Creating a new FTP account

When an FTP account is created, cPanel assigns it access to a specific directory and its subdirectories.

1. Log in to cPanel.
2. Open the Tools page.
3. In the Files section, click FTP Accounts.
4. Under Add FTP Account, enter a username in the Log In field.
5. Select the domain associated with the account.
6. Enter and confirm a password, or use the password generator.
7. Review the Directory field and ensure it points to a restricted subdirectory.
8. Set a storage quota if required.
9. Click Create FTP Account.

[Screenshot placeholder: Add FTP Account form]

Leaving the directory field unrestricted grants access to all files on the account and should be avoided.

Changing an FTP account password

Passwords should be changed regularly or immediately if unauthorized access is suspected.

1. Log in to cPanel.
2. Open FTP Accounts from the Files section.
3. Locate the FTP account.
4. Click Change Password.
5. Enter and confirm the new password.
6. Click Change Password to save.

[Screenshot placeholder: Change FTP password option]

Deleting an FTP account

Unused FTP accounts should be removed to reduce security risks.

1. Log in to cPanel.
2. Open FTP Accounts.
3. Locate the account to remove.
4. Click Delete.
5. Choose whether to remove only the account or both the account and its home directory.

[Screenshot placeholder: Delete FTP account confirmation]

Security considerations

• Limit FTP accounts to specific directories only.
• Use strong, unique passwords for each account.
• Remove unused accounts promptly.

For environments requiring stronger isolation or user separation, infrastructure such as cloud servers or a dedicated server may be more appropriate than shared ho