SFTP Hosting

Secure File Transfer Protocol (SFTP) is a secure method for transferring files over the internet. The process uses an SFTP server to securely upload, store and retrieve files.

SFTP securely parcels everything sent between the network and server into an encrypted package, including the passwords you enter to access the server. Using this method is called tunnelling, as it sends the data down a closed encrypted path, like a tunnel. Users access and upload files using a customisable interface. SFTP establishes a connection between the user and the server through the Transmission Control Protocol (TCP).

SFTP is a popular product for businesses that need to securely transfer data. The security processes involved assist businesses in complying with regulations and legislation. It can be used by any business, and is especially useful for those handling sensitive data, such as financial services companies, the legal industry and payroll data companies.

Secure transfer using HTTPS

Using a web browser

• A user hits a web page on a secure channel over SSL (port 443) and logs in with their username and password;
• The user clicks ‘upload’ and browses the local machine for a file to upload (multiple files can be uploaded at one time). The web page then uploads the file(s) over the secure channel to the server;

• The file is stored on the server file system ready to be downloaded. The user clicks on a file and it is downloaded via the secure channel.

Secure transfer using SFTP

Using software e.g. FIleZilla or CuteFTP

• A user launches their SFTP client software and logs in using their username and password;
• The software usually displays 2 panels; the left panel displays all files on the local machine, the right window displays all files on the server (restricted to the user’s account);
• The user drags the file they want to send from the left window (user’s computer) across to the right window (SFTP server). The client software uploads the file(s) securely to the server over SFTP port 22 or FTPS port 990;
• The file(s) are stored on the server file system ready for download (using the same process).

SFTP provides a much more secure connection and error handling than FTP. Using encryption and tunnelling through one channel as opposed to two means that the connection is always secured, and no clear data such as text passwords are transferred. Additional measures including firewalls, authentication and encryption increase the security of SFTP.