How to Use FTP to Manage Your WordPress Site
Learn how to manage WordPress files with FTP or SFTP: upload themes and plugins, edit configuration files, fix errors when the dashboard is down, set permissions, and restore access.
WordPress
The dashboard covers most day-to-day work. FTP or SFTP is for when you need the files themselves: a plugin that locks you out, a theme that whitescreens the site, or a copy of wp-config.php. Prefer SFTP. Using SFTP with cPanel
Connect
- Create or use an FTP account pointed at the WordPress root (often
public_html). Create an FTP Account - Open FileZilla, WinSCP, or another client. Choose a client
- Host, complete username, password or SSH key, port 21 or 22.
- You should see
wp-admin,wp-content, andwp-includes.
Common tasks
- Download the zip from wordpress.org or another source you trust. Unzip locally.
- Upload the plugin folder to
wp-content/plugins, or the theme folder towp-content/themes. - Activate it in the dashboard if the site still loads.
Rename the plugin folder (add -off) or rename the active theme folder so WordPress falls back to a default theme. Then log in and remove or replace the broken item.
Download the WordPress tree, including wp-content/uploads and wp-config.php. That is files only. Export the database separately. Website backups
wp-config.php holds database credentials. Do not upload it to a public folder or paste it into a ticket in full.
Permissions
| Item | Typical mode |
|---|---|
| Directories | 755 |
| Files | 644 |
| wp-config.php | Often 600 or 640 on a locked-down host |
Security
Frequently Asked Questions
Do I still need FTP if I have the WordPress dashboard?
Yes for emergencies. The dashboard cannot help if a plugin causes a white screen or you are locked out. FTP or SFTP still reaches wp-content so you can rename a plugin, replace a theme, or upload a backup. Day-to-day posts can stay in wp-admin. Client options are in choosing an FTP client.
Where do I upload a plugin or theme with FTP?
Unzip the package on your computer first. Upload the plugin folder into wp-content/plugins, or the theme folder into wp-content/themes. Do not dump a nested extra folder or a zip file unless you will extract it on the server. Then activate it in the dashboard. Account setup is in creating an FTP account in cPanel.
How do I disable a broken plugin with FTP?
Connect, open wp-content/plugins, and rename the plugin folder, for example by adding -off. WordPress will stop loading it, which often restores wp-admin. Delete or replace the plugin after you can log in. The same rename trick works on a broken theme folder in wp-content/themes. Recovery context is in manual website recovery with FTP.
Does an FTP backup include the WordPress database?
No. FTP copies core files, themes, plugins, uploads, and wp-config.php. Posts and settings stay in MySQL. Export the database in cPanel and store that dump with the file copy. A files-only archive cannot rebuild the site. Backup scheduling is in automating website backups with FTP.
Should I use SFTP for WordPress files?
Yes when SSH is enabled, because wp-config.php holds database credentials. Extra FTP accounts still use FTPS unless they have SSH. Avoid plain FTP for WordPress work. See FTP vs SFTP vs FTPS and using SFTP with cPanel.
Which folder is the WordPress root?
It is the folder that contains wp-config.php and wp-content, often public_html or a subdirectory such as public_html/blog. An extra FTP user may already start inside that root. Do not upload a second WordPress copy into a random subfolder unless you want a second site. Path checks are in uploading files with FTP.
What permissions should WordPress files use?
Use 644 for most files and 755 for directories unless your host documents another standard. wp-config.php should stay tightly controlled and never world-writable. Wrong chmod can cause install or upload errors after an otherwise good transfer. Account and quota notes are in FTP user accounts explained.
Can several people share one WordPress FTP login?
They can, but they should not. Give each person or vendor a jailed extra account and revoke it when the work ends. Do not put the primary cPanel password in a group chat. More articles are on the blog index and in managing multiple FTP accounts.
Related FTP Tutorials and How To Guides
Tweet Share Pin Email
Add Comment
This policy contains information about your privacy. By posting, you are declaring that you understand this policy:
- Your name, rating, website address, town, country, state and comment will be publicly displayed if entered.
- Aside from the data entered into these form fields, other stored data about your comment will include:
- Your IP address (not displayed)
- The time/date of your submission (displayed)
- Your email address will not be shared. It is collected for only two reasons:
- Administrative purposes, should a need to contact you arise.
- To inform you of new comments, should you subscribe to receive notifications.
- A cookie may be set on your computer. This is used to remember your inputs. It will expire by itself.
This policy is subject to change at any time and without notice.
These terms and conditions contain rules about posting comments. By submitting a comment, you agree with these rules:
- Although the administrator will attempt to moderate comments, not all comments can be moderated at all times.
- You acknowledge that all comments express the opinions of the original author and not those of the administrator.
- You will not post material which is knowingly false, obscene, hateful, threatening, harassing or invasive of privacy.
- The administrator has the right to edit, move or remove any comment for any reason and without notice.
Failure to comply with these rules may result in being banned from submitting further comments.
These terms and conditions are subject to change at any time and without notice.
How Do I Get My Local Business Found Online
The Best URL Structure for SEO
26 Free or Low Cost Alternatives to Google Analytics GA4
Common Social Media Marketing Mistakes You Need to Know
Comments