How do I ensure a secure connection with SFTP instead of FTP?

In this article from the TripleZero iT knowledge base we explain: How do I ensure a secure connection with SFTP instead of FTP?. We describe the purpose, the preparation and a clear method that you can follow step by step.

This manual is written for customers of TripleZero iT and assumes common configurations on shared hosting, reseller environments and control panels such as DirectAdmin, CyberPanel and Plesk.

What you need

• Access to the customer panel or the TripleZero iT customer panel.
• Your domain name and any login/mailbox details.
• A current browser and, where applicable, FTP/SSH access.
• Preferably a recent backup before making structural changes.

Step-by-step approach

1. Log in to the appropriate panel at TripleZero iT and select the domain or account affected by the change.
2. Check that you have the correct environment (production vs. test) and note the current settings.
3. Perform the action that corresponds to “How do I ensure a secure connection with SFTP instead of FTP?”. Work calmly and do not change multiple critical options at the same time.
4. Save changes and test the result: website, email or DNS — depending on the subject.
5. Document what you changed so you can roll back later or help support more quickly.

Deeper explanation

The topic “How do I ensure a secure connection with SFTP instead of FTP?” often affects multiple layers: DNS, web server, mail server, application (e.g. WordPress) and account limits. Problems usually arise when one layer is changed without checking the others.

For TripleZero iT, we recommend first verifying that DNS points to the correct name servers, then checking control panel settings, and only then changing application settings (plugins, themes, .htaccess).

Resources and limits

View the current consumption of disk, inodes and bandwidth in the control panel. Clean up logs, old backups and unused installations before expanding the package.

After deleting files, usage evaluation may lag by several minutes to hours — refresh statistics or wait for the nightly recount.

Hardening checklist

• Update software and remove unused plugins/themes.
• Use unique strong passwords and 2FA where available.
• Restrict admin URLs, XML-RPC and unnecessary ports.
• Monitor logs and quickly respond to suspicious spikes in traffic or CPU.

Post-completion checklist

• Does the website work over HTTP and HTTPS without certificate errors?
• Are test emails delivered and not marked as spam?
• Are limits (disk, inodes, bandwidth) still within the package limits?
• Are there no unintentional redirects, firewall blocks or PHP errors in the logs?

Common bottlenecks

• DNS propagation: changes are not immediately visible everywhere.
• Wrongly selected domain or user in a reseller environment.
• Cache (browser, CDN, LiteSpeed/OpenLiteSpeed, WordPress plugins) showing old content.
• Missing permissions on directories or wrong document root.

When to enable support

If you get stuck after these steps — for example with persistent mail errors, SSL problems, or an unreachable site — open a ticket at TripleZero iT. Please include domain name, time, error message (screenshot or exact text) and what you have already tried.

Do you still have questions after following these steps? Contact TripleZero iT support via the ticket system or email. Always mention your domain name and a clear description of the problem, so that we can help you faster.

Also view other articles in the knowledge base for additional explanations about hosting, email and security.