Connecting to Servers

SFTP - The Recommended Protocol

SFTP runs over SSH on port 22. Enter the host, username and password. WinSCP then shows the server's host key fingerprint the first time; accept and cache it.

Host:    203.0.113.10
Port:    22
Protocol: SFTP
User:    deploy

FTP and FTPS

Plain FTP (port 21) is unencrypted and only acceptable on private networks. FTPS wraps FTP in TLS. Choose FTPS over plain FTP whenever both are offered.

SCP

SCP transfers individual files over SSH but does not negotiate like SFTP. WinSCP keeps it for old servers that only support SCP.

SSH Keys Instead of Passwords

Generate a key pair, upload the public key to the server authorized_keys file, and then choose the private key in the login dialog. WinSCP unlocks it with a passphrase or through Pageant (SSH agent).

Advanced Connection Settings

Host-key verification, port options, proxy settings and the local default directory all live under the Advanced button in the login dialog. Configure a proxy if the server is only reachable through a gateway.

Key Points

• SFTP over SSH is the default, secure choice.
• FTPS is the encrypted upgrade of plain FTP.
• Private keys remove passwords and strengthen logins.
• Host keys should be verified before final acceptance.