How to Set Up and Use WinSCP FTP Client
Learn how to set up and use WinSCP on Windows for secure website file transfers. Configure SFTP, FTPS, FTP, or SCP, save site profiles, upload and download files, synchronize directories, manage permissions, and troubleshoot connection problems.
WinSCP
WinSCP is a free, open-source Windows client for FTP, FTPS, SFTP, SCP, WebDAV, and Amazon S3. It is useful for managing files on cPanel-hosted servers. Features include Commander or Explorer views, scripting, and directory synchronization. WinSCP
Why Choose WinSCP?
Free
Open-source under the GNU GPL for personal or business use. Download from winscp.net.
Secure Protocols
FTP, FTPS, SFTP, and SCP. Prefer SFTP when SSH is enabled. FTP vs SFTP vs FTPS
Two Interfaces
Commander (dual-pane) or Explorer (single-pane).
Automation
Scripting, synchronization, portable mode, and an integrated editor. Automating File Transfers
Prerequisites
- 1cPanel access and either an FTP account (FTP/FTPS) or SSH access (SFTP). Create an FTP Account
- 2WinSCP from the official download page: winscp.net/eng/download.php
- 3Server details: hostname or IP, username, password or key, port 21 (FTP/FTPS) or 22 (SFTP) unless the host specifies another port.
Download and Install
- Download the installer from the official site or SourceForge.
- Run the .exe, choose the language, and accept the license.
- Use Typical installation, or Custom for portable mode.
- Pick Commander (dual-pane) or Explorer (single-pane). Commander is better for frequent transfers.
- Click Install, then Finish, and launch WinSCP.
Portable mode stores settings in a file instead of the registry, which is useful on a USB drive.
Configure a Connection
Create a restricted FTP/FTPS login in Files → FTP Accounts. SFTP still needs an SSH-enabled account. The primary cPanel account can use SFTP when SSH is enabled.
Create an FTP Account- Open WinSCP and click New Site.
- File protocol: SFTP (preferred when SSH is on), FTP, or FTP with TLS/SSL explicit encryption.
- Host name: domain,
ftp.yourdomain.com, or server IP. - Port: 22 for SFTP, 21 for FTP/FTPS, or the host’s custom port.
- User name: complete FTP username (e.g.,
winscpuser@yourdomain.com) or the cPanel/SSH username for SFTP. - Optional Advanced: remote directory such as
/public_html, Passive mode for FTP/FTPS, SSH private key for SFTP. - Click Save, name the site, then Login. Accept a trusted host key or certificate.
- In cPanel go to Security → SSH Access → Manage SSH Keys.
- Generate an RSA key (2048 or 4096), download both keys, and authorize the public key.
- In WinSCP use Advanced → SSH → Authentication and select the private key. Convert to
.ppkwith PuTTYgen if needed.
- Commander: local files on the left, server on the right.
- Upload or download with drag-and-drop or F5.
- Rename, delete (F8), or create a folder (F7). Permissions are often 644 for files and 755 for directories.
- Double-click text files to edit in WinSCP or an external editor.
Advanced Features
.htaccess without a separate download.Security
- Prefer SFTP or FTPS. Avoid plain FTP. Securing FTP Transfers
- Use SSH keys for SFTP when SSH is enabled. Using SFTP with cPanel
- Restrict extra FTP accounts to a folder such as
/public_html/winscp. - Review sessions in FTP Connections and enable cPanel 2FA.
Troubleshooting
| Issue | What to try |
|---|---|
| Connection failures | Check hostname, port, protocol, and Passive mode for FTP/FTPS. Confirm SSH for SFTP. Connection troubleshooting |
| Authentication errors / 530 | Use the complete username. Reset the password in cPanel. For keys, authorize the public key and restrict private-key permissions. |
| Firewall blocks | Allow port 21 or 22, or the custom port from the host. |
| Directory access | Confirm the folder exists. Directories 755, files 644. File Manager |
| Logs | WinSCP Preferences → Logging, plus cPanel FTP activity tools. |
Frequently Asked Questions
Does WinSCP work on macOS or Linux?
No. WinSCP is a free Windows client. On a Mac use FileZilla, Cyberduck, Commander One, or Fetch. On Linux use FileZilla or command-line sftp when SSH is enabled. If you switch PCs and Macs, FileZilla keeps the same dual-pane layout. Other options are listed in choosing an FTP client.
Should I pick Commander or Explorer view?
Commander shows local files on the left and the server on the right, which is faster for drag-and-drop and F5 copies. Explorer shows only the remote site, more like File Explorer. Choose Commander for daily website work. You can change the interface later in preferences if the first choice feels wrong.
Can an extra cPanel FTP account use SFTP in WinSCP?
Usually no. Extra FTP users are for FTP or FTPS and do not automatically get SSH. If SFTP on port 22 fails with user@yourdomain.com, edit the saved site to FTP with TLS/SSL explicit encryption on port 21. Use SFTP with the primary cPanel username after SSH is enabled. See FTP vs SFTP vs FTPS and using SFTP with cPanel.
How do I use an SSH key with WinSCP?
Create and authorize the key in cPanel under Security → SSH Access. In WinSCP open Advanced → SSH → Authentication and select the private key. If cPanel gave you an OpenSSH key, convert it to .ppk with PuTTYgen first. Leave the password blank when the key is loaded. This is for SFTP only, not for a regular extra FTP account. Create limited FTP logins with an FTP account in cPanel.
What is directory synchronization in WinSCP?
Commands → Synchronize compares a local folder with a remote folder and copies only the files that differ. Use it for a staging copy or a repeat deploy into public_html. Check the direction first so you do not overwrite newer live files with old local ones. Keep a backup before the first sync. Automation ideas are in automating file transfers.
Can I script WinSCP transfers?
Yes. WinSCP includes scripting, a command-line tool, and a programming library for unattended SFTP or FTP jobs. Save a site profile first, then call that profile from a script instead of storing a password in a public web file. Test one manual run before you schedule it. This is the main reason many Windows users pick WinSCP over FileZilla.
How does WinSCP compare with FileZilla?
Both are free and can use FTPS or SFTP with cPanel. FileZilla runs on Windows, macOS, and Linux. WinSCP is Windows-only and stronger for sync, scripts, SSH keys, and a built-in editor. Choose FileZilla for one client on every computer. Choose WinSCP for Windows automation. FileZilla steps are in FileZilla setup.
Why does WinSCP show 530 authentication failed?
The username, password, or protocol does not match the account. Extra FTP users need the complete name@domain login and FTPS more often than SFTP. Reset that account password in cPanel, confirm port 21 or 22, and enable Passive mode for FTPS. A short primer is what FTP is used for, with more articles on the blog index.
FTP Tutorials and How-To Guides
Tweet Share Pin Email
Add Comment
This policy contains information about your privacy. By posting, you are declaring that you understand this policy:
- Your name, rating, website address, town, country, state and comment will be publicly displayed if entered.
- Aside from the data entered into these form fields, other stored data about your comment will include:
- Your IP address (not displayed)
- The time/date of your submission (displayed)
- Your email address will not be shared. It is collected for only two reasons:
- Administrative purposes, should a need to contact you arise.
- To inform you of new comments, should you subscribe to receive notifications.
- A cookie may be set on your computer. This is used to remember your inputs. It will expire by itself.
This policy is subject to change at any time and without notice.
These terms and conditions contain rules about posting comments. By submitting a comment, you agree with these rules:
- Although the administrator will attempt to moderate comments, not all comments can be moderated at all times.
- You acknowledge that all comments express the opinions of the original author and not those of the administrator.
- You will not post material which is knowingly false, obscene, hateful, threatening, harassing or invasive of privacy.
- The administrator has the right to edit, move or remove any comment for any reason and without notice.
Failure to comply with these rules may result in being banned from submitting further comments.
These terms and conditions are subject to change at any time and without notice.
How Encryption Works
Firewalls Explained
How VPNs Work
What Is JavaScript
Comments