Create WordPress site FTP access in your hosting control panel, not in the WordPress dashboard. In a typical cPanel account, open Files → FTP Accounts, create a separate login, and set its directory to the smallest folder the person needs. Use SFTP or FTPS instead of unencrypted FTP whenever your host offers it, back up the files and database before changing anything, and delete temporary accounts when the work is finished.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
This guide explains the complete process, how to restrict a developer to one installation, how FTP, FTPS and SFTP differ, what to do when cPanel does not show FTP Accounts, and how to recover from the common connection and permission errors.
As an Amazon Associate I earn from qualifying purchases.
What a WordPress FTP account is—and what it is not
An FTP account is a server login for transferring files. It lets a person or application connect to the hosting account with a username, password, host name, port and transfer protocol. The account can upload, download, rename and delete files within the directory assigned by the host.
It is separate from a normal WordPress dashboard user. Creating an Editor or Administrator under Users → Add New does not create server access, and an FTP account does not grant access to the WordPress dashboard. Keep those two identity systems separate: WordPress roles control content and settings inside the application, while FTP permissions control files on the server.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
The most important FTP security setting is the account’s root directory. A login rooted at one WordPress installation cannot normally browse above that directory. A login rooted at the entire hosting account may reach other domains, staging copies, configuration files and backups. Give each person the narrowest path that still permits the work.
Confirm the hosting prerequisites first
- FTP service: Your provider must have enabled FTP access. Some packages disable it entirely or expose only a file manager and SSH-based access.
- Account allowance: Hosts can impose a maximum number of FTP accounts. Reaching that limit can hide the creation option or prevent a new account from being saved.
- Supported protocols: Ask whether the account supports SFTP, FTPS, or only plain FTP. The protocol, port and authentication method are server-specific.
- Correct site path: Identify the document root for the exact domain, subdomain, staging copy or multisite installation you intend to edit. Hosting accounts often contain several installations.
- Backup capability: Ensure you can make a current copy of both the site files and its database before an upload, replacement or deletion.
If the hosting panel does not show an FTP section, do not assume that WordPress is broken. The provider may have removed the feature from your plan, reached its account limit, or replaced it with a file manager or SFTP workflow.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →How to create a restricted account in cPanel
The labels below describe the standard cPanel workflow. Your host can rename, hide or limit individual fields, so follow the provider’s connection details when they differ.
- Open the account manager. Sign in to cPanel and choose Files → FTP Accounts. If the menu is absent, contact the host or use its File Manager instead of trying to create a WordPress user.
- Choose a login and domain. Enter a unique login name and select the domain associated with the site. cPanel may display the final username with an account or domain prefix; record the complete value exactly as shown.
- Generate a strong password. Use a long, unique password and the panel’s generator when available. Do not reuse the primary hosting password. Never paste the credential into a shared document, public support ticket or source-code repository.
- Set the directory root. In Directory, enter the narrowest required path. cPanel treats this value as the account’s top-level directory and includes its subdirectories. For a developer working on one installation, select that installation’s directory rather than the entire account home. Check the path character by character before saving.
- Apply a quota when offered. A quota limits how much storage the FTP account can consume. cPanel notes that quota support depends on the FTP daemon, so the field may be unavailable or may not be enforced by your server.
- Create the account. Submit the form and wait for the success message. If cPanel reports a limit or validation error, remove an unused account or ask the host to adjust the package.
- Record connection details securely. Gather the server host name, port, complete username, protocol and password supplied by the provider. Store them in a password manager and send them through a private channel to the intended person.
- Test the boundary. Connect with an FTP client and confirm that the expected WordPress files are visible. Try to move to the parent directory; a properly restricted account should not expose folders outside its assigned root.
Choose the safest transfer protocol
Plain FTP sends credentials and file data without encryption. WordPress’s official guidance states: FTP, or File Transfer Protocol, sends data in clear text.
That means someone able to observe the connection could capture the password or alter files in transit. Prefer an encrypted protocol whenever the host supports one.
| Protocol | Encryption | How it works | Host availability and connection details |
|---|---|---|---|
| FTP | None; credentials and data are sent in clear text. | Traditional file-transfer protocol. | Availability, port and authentication depend on the provider. Use only when no encrypted option exists and the risk is understood. |
| FTPS | Uses TLS to encrypt the FTP connection. | FTP with a server certificate and encrypted session. | Requires a host-supported FTPS mode and the provider’s hostname, port and certificate settings. |
| SFTP | Encrypts the password and transferred data through SSH. | SSH File Transfer Protocol; it is different from FTP with TLS. | Requires SSH/SFTP access enabled by the host, plus the supplied hostname, port and authentication method. |
Do not select SFTP merely because an FTP client labels every connection “FTP.” SFTP and FTPS use different server services and credentials. If the provider gives you an SSH key, key passphrase or a particular port, configure those values exactly. For FTPS certificate warnings, use the server hostname supplied by the host; cPanel notes that FTP does not support SNI and recommends the hostname for SSL connections.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Configure an FTP client without exposing credentials
A desktop client is useful for repeated transfers, large batches and scripted workflows. FileZilla is one example, but the same fields appear in most clients.
- Create a new site entry in the client’s site manager rather than typing credentials into a temporary dialog each time.
- Enter the provider’s host name, complete username and port. Select SFTP or FTPS if offered; do not leave the protocol on plain FTP by accident.
- Choose the authentication mode required by the host, such as a password or SSH key. Save secrets in the client’s protected credential store or your password manager, not in a shared project file.
- Connect and inspect the remote path. The first directory shown should match the root assigned in cPanel. If it opens in the wrong site, disconnect and correct the account’s Directory value or the client’s remote-path setting.
- Transfer one harmless test file, verify its permissions and visibility, then remove it. This confirms that the account can perform the intended operation without changing production code.
For a one-time small edit, the hosting File Manager may be safer and faster because it requires no separate credential handoff. A client is preferable when you need repeatable bulk transfers, local backups or drag-and-drop comparison between many files.
Set directory scope for developers and vendors
One site in a multi-site hosting account
Find the installation’s document root, then use that path as the account’s directory. If the site lives in a subfolder under the account home, do not give the developer the home directory just because it is easier to type. A restricted account should open directly in the selected installation and contain only that site’s files and subdirectories.
Theme, plugin or upload-only work
Use a narrower subdirectory when the task allows it. A theme specialist may need only the active theme folder; a media contractor may need the uploads folder. Remember that a person who can edit PHP files can often change site behavior, so directory restriction limits accidental exposure but does not replace trust, code review or backups.
Primary and special accounts
The primary or special cPanel FTP account can reach the entire cPanel account, including files outside public_html. Reserve it for administration and use SFTP for that account. For routine work, create a secondary account rooted at the specific installation so it can be revoked without changing the primary hosting login.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Separate people, separate accounts
Create one account per freelancer, agency or employee. Sharing a single login prevents reliable attribution and forces you to change the password for everyone when one person leaves. Individual accounts let you delete one person’s access while leaving other work uninterrupted.
Anonymous FTP
Anonymous FTP is a separate feature from named accounts. Leave it disabled unless you have a documented, deliberate requirement and understand that it can expose files to unauthenticated visitors.
Back up before replacing or deleting anything
An FTP transfer changes files directly on the server. A bad upload, partial transfer or mistaken deletion can take the site offline, and a file backup alone cannot restore posts, settings or orders stored in the database.
- Make a current backup of the complete WordPress files, including
wp-content, configuration files and any custom directories. - Export a current copy of the WordPress database through the host’s backup tool or database interface.
- Confirm where the backup is stored and that it can be downloaded or restored. A backup left on the same account may be lost with the original files.
- Record the exact site directory and the files you plan to change. For a production site, schedule disruptive replacements during a low-traffic window.
- Upload new files alongside the old version when practical, verify ownership and functionality, and remove the old files only after the replacement works.
Avoid changing permissions simply to make an upload succeed. File ownership and write access must match the host’s PHP and web-server configuration; broad writable permissions can create a larger security problem. Ask the provider to correct ownership when the account cannot write to files it should manage.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchManage existing FTP accounts safely
Return to Files → FTP Accounts whenever you need to review access. The account list should match current projects and people, not historical migrations.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
- Change a password: Edit the account or use the panel’s password action, then deliver the new value privately. Changing a secondary account does not alter the primary hosting login.
- Adjust the directory: Where cPanel and the FTP daemon support it, edit the Directory field to narrow or expand scope. Test the new root with the client before the person begins work.
- Adjust a quota: Apply a lower limit for temporary accounts when the server enforces quotas. A quota controls storage consumption, not which files the user can read.
- Delete completed accounts: Remove accounts created for migrations, emergency repairs or finished freelance work. Deleting an account does not automatically delete the files in its directory.
- Review after major events: Check the list after a domain migration, staging project, agency handoff or security incident. Unknown accounts should be investigated and removed or rotated.
Use short-lived access for temporary work. Set an end date in your own task tracker, then revoke the account and rotate any related secrets when the work is complete.
File Manager versus an FTP client
| Task | Hosting File Manager | FTP client |
|---|---|---|
| Quick single-file edit or rename | Convenient in the browser; no separate client installation. | Works, but requires a configured connection. |
| Bulk upload or download | Can be slower or limited by browser and host controls. | Designed for repeatable batches and large transfers. |
| Repeatability | Actions are manual and tied to the panel session. | Saved site profiles and transfer queues make recurring work easier. |
| Required access | Hosting-panel login; may expose broader account controls. | Separate FTP, FTPS or SFTP account with a directory root. |
| Best use | Emergency inspection, a small correction or a host that does not offer FTP. | Development deployments, local backups and structured file synchronization. |
Whichever tool you use, verify the remote path before pressing delete or overwrite. Browser and client interfaces can display similarly named directories from different domains.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.When WordPress asks for FTP credentials during an update
WordPress may request FTP details while installing a plugin, theme or core update when it cannot write to the filesystem directly. Do not respond by granting a broad account or loosening every permission.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Confirm that the update is being run on the intended site and that a current files-and-database backup exists.
- Check file and directory ownership, write access and the host’s configured PHP filesystem method. The web server process must be able to write to the relevant WordPress directories under the host’s security model.
- Ask the provider whether direct writes are supported, whether a specific filesystem method is required, and whether SFTP is available for administrative transfers.
- If FTP-based updates are deliberately required, use the narrowest encrypted account and the constants documented in the official
wp-config.phpreference:FTP_HOST,FTP_USER,FTP_PASSandFTP_SSL. - Remove or protect any credentials stored in configuration after the maintenance task. Never leave long-lived secrets in publicly readable files or support tickets.
The FTP_SSL setting distinguishes secure FTP behavior from an unencrypted connection. It does not turn SFTP into FTPS; those are separate protocols and must be enabled by the server.
Troubleshoot the most common failures
“FTP Accounts” is missing
The provider may have disabled FTP, your package may have reached its account limit, or the host may expect you to use File Manager or SFTP. Ask support which transfer method is enabled and whether the limit can be changed. Do not install a WordPress plugin to compensate for a server-side restriction.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
The login is rejected
Check the complete username, not just the short name displayed in your notes. Verify the host name, port and selected protocol against the provider’s instructions. A password created for FTPS may fail on SFTP, and a cPanel account prefix may be required. Reset the secondary account password if necessary rather than sharing the primary account.
The connection succeeds but the files are missing
The account is probably rooted in a different directory or the client has opened an unexpected remote path. Review the cPanel Directory value, reconnect and compare the visible folders with the known document root. In a multi-domain account, confirm that you selected the correct domain when creating the login.
Uploads or replacements fail
Check the account quota, available disk space, file ownership, directory permissions and the selected protocol. A transfer can also fail when the destination is outside the account’s assigned root. Ask the host to correct ownership instead of applying broad write permissions.
FTPS reports a certificate or hostname error
Use the server hostname supplied by the provider rather than an alternate domain name. cPanel notes that FTP does not support SNI, so the hostname is recommended for SSL connections. Confirm that the client is using the FTPS mode the server expects.
WordPress repeatedly asks for credentials
Inspect ownership and the filesystem configuration first. Repeated prompts usually indicate that the web server cannot write to the files, not that WordPress needs an administrator account. Contact the host if the correct ownership cannot be restored from your panel.
A practical access handoff checklist
- Identify the exact production, staging or development directory.
- Back up the files and database and verify where the copies can be restored.
- Create a named secondary account for the individual or vendor.
- Set the directory to the smallest useful scope and apply a supported quota.
- Use SFTP or FTPS; document the host-supplied port and authentication method.
- Send credentials privately and store them in a password manager.
- Test login, directory boundaries, upload and download before real changes begin.
- Review ownership and permissions after deployment.
- Delete the account or rotate its password as soon as the assignment ends.
FTP access is a server-level privilege, so the host controls whether it exists, how many accounts you can create, which ports and protocols are available, and how authentication works. WordPress controls none of those settings. Treat the hosting panel as the source of truth, keep every account narrowly scoped, and prefer encrypted transfers for all routine maintenance.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
