FTP User Accounts Explained
Learn how FTP user accounts work: usernames, passwords, directory limits, quotas, and access control so each person only reaches the folders they need.
User Accounts
An FTP account is a login that can upload and download files on the hosting server. In cPanel you can keep the primary account and add extra logins with their own password, home folder, and disk quota. Create an FTP Account
Login
Usually name@yourdomain.com plus a password.
Directory
The account is jailed to that folder and cannot walk above it.
Quota
Optional cap on how much that login can store.
Primary vs extra accounts
| Primary cPanel user | Extra FTP account | |
|---|---|---|
| Home | The whole account home, including public_html | Only the directory you assign |
| SFTP | Yes, if SSH is enabled | No. Extra FTP users are FTP/FTPS only |
| Use for | Site owner, full file work | Designer, plugin vendor, one-site folder |
Permissions in practice
cPanel extra FTP accounts can read and write inside their directory. They do not get a separate “read-only FTP role” in the add-account form. Limit risk by pointing the home at a subfolder such as public_html/uploads, not the whole site.
Unix modes still apply on files the user creates. Typical web values are 644 for files and 755 for directories. Change those in File Manager or an FTP client, not in the FTP Accounts table.
Limits that matter
SFTP is not the same as “an FTP account with TLS.” SFTP needs SSH. Extra FTP accounts created in cPanel do not automatically work over SFTP. Using SFTP with cPanel
Security habits
- Prefer FTPS for extra accounts and SFTP for the owner account. Securing FTP Transfers
- Delete logins when a contractor is finished.
- Do not share the primary cPanel password as an FTP login.
- Review accounts after staff or vendor changes.
Frequently Asked Questions
What is an FTP user account in cPanel?
It is a username and password that can connect with FTP or FTPS and work only inside the folder you assign. The complete login is usually name@yourdomain.com. The primary cPanel user can reach the whole home directory. Extra accounts should be jailed to one site or one project folder. Create them with an FTP account in cPanel.
How do I limit what an FTP user can see?
Set the Directory field when you create the account, such as public_html/project. That folder becomes the user’s home, so they cannot browse up into other sites or mail files. Change the path later in FTP Accounts if the job scope changes. Delete the account when the contractor is finished. Multi-user setup is in managing multiple FTP accounts.
What does an FTP quota do?
A quota caps how much disk that FTP user can consume through uploads. Use it so a media folder cannot fill the whole hosting plan. Unlimited is fine for a trusted admin account. If uploads fail after a burst of images, check the quota and the plan’s disk usage in cPanel before you blame the client.
Can extra FTP accounts use SFTP?
Usually no. Extra accounts are for FTP or FTPS. SFTP needs SSH and typically the primary cPanel username. If SFTP fails with the extra login, connect with explicit FTPS instead. Do not assume SSH is on for every hosting plan. See FTP vs SFTP vs FTPS and using SFTP with cPanel.
How do I keep FTP accounts secure?
Use a unique strong password, FTPS or SFTP, and a jailed directory. Do not share the main cPanel password. Remove unused users after a project ends. Prefer a dedicated account for scripts so a leaked backup job cannot rewrite the whole site. Password guidance is in creating a strong password.
How often should I review FTP users?
Review them when staff or vendors change, and at least on a regular cadence such as each quarter. Disable anyone who no longer needs access. Confirm each remaining user still points at the right folder. Check FTP Connections if you see logins you do not recognize. A short primer is what FTP is used for.
How do file permissions relate to the FTP account?
The account decides who can connect and which folder they start in. chmod decides whether a file is readable or writable on disk, commonly 644 for files and 755 for directories. An FTP user can still fail to edit a file if ownership or chmod is wrong. Fix that in File Manager or the client’s Properties dialog, not only in FTP Accounts.
Should every teammate get their own FTP login?
Yes. Separate logins make it easier to revoke access and to limit each person to one folder. Shared passwords linger after someone leaves. Save each login in the client’s Site Manager instead of a group chat. Client options are in choosing an FTP client, with more articles on the blog index.
Related FTP Tutorials and How To Guides
Tweet Share Pin Email
Add Comment
This policy contains information about your privacy. By posting, you are declaring that you understand this policy:
- Your name, rating, website address, town, country, state and comment will be publicly displayed if entered.
- Aside from the data entered into these form fields, other stored data about your comment will include:
- Your IP address (not displayed)
- The time/date of your submission (displayed)
- Your email address will not be shared. It is collected for only two reasons:
- Administrative purposes, should a need to contact you arise.
- To inform you of new comments, should you subscribe to receive notifications.
- A cookie may be set on your computer. This is used to remember your inputs. It will expire by itself.
This policy is subject to change at any time and without notice.
These terms and conditions contain rules about posting comments. By submitting a comment, you agree with these rules:
- Although the administrator will attempt to moderate comments, not all comments can be moderated at all times.
- You acknowledge that all comments express the opinions of the original author and not those of the administrator.
- You will not post material which is knowingly false, obscene, hateful, threatening, harassing or invasive of privacy.
- The administrator has the right to edit, move or remove any comment for any reason and without notice.
Failure to comply with these rules may result in being banned from submitting further comments.
These terms and conditions are subject to change at any time and without notice.
6 Best US Cities for Digital Nomad Entrepreneurs
YouTube Tricks Tips and Hacks
Optimizing a Drupal Website for Page Speed
Ultimate Guide for The Best Joomla Resources
Comments