To get SFTP access to a WordPress Multisite network, ask the hosting provider or server administrator to create an SFTP user for the correct production or staging environment. They must provide the server hostname, SSH port, username, and either a password or SSH key. Connect with an SFTP-capable client, then confirm whether the account can see the complete multisite installation or only a restricted directory such as wp-content/uploads.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
SFTP credentials are separate from WordPress dashboard credentials and should be treated as administrative file access. Use encrypted SFTP, request the narrowest path that supports your task, and check ownership and permissions before changing files.
As an Amazon Associate I earn from qualifying purchases.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWhat SFTP access means on a WordPress Multisite
SFTP is the encrypted file-transfer protocol carried over SSH. It lets you upload, download, rename and delete files on the server through an SFTP client. On a WordPress Multisite, those files normally belong to one shared WordPress installation that serves several sites in the network.
A WordPress role such as Editor, Administrator or Super Admin does not automatically create an SFTP login. Dashboard permissions are stored and enforced by WordPress; SFTP permissions are created and enforced by the hosting account, operating system and SSH service. The host or server administrator therefore controls who can connect, which server they reach and which directory they can access.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
The distinction matters because an SFTP account may be able to alter PHP files, plugins, themes, uploads, configuration and other settings for every site in the network. WordPress.com documentation warns that users with SFTP or SSH credentials have administrative privileges to add, modify and remove site files and settings. Do not handle those credentials like a limited content-editor account.
Before requesting an account
Confirm production or staging
First identify the environment you need. Production and staging may use different hostnames, credentials and filesystem paths. A staging login can be safer for testing a plugin, theme or migration; it is not a substitute for production access when the change must go live. Some managed hosts document separate SFTP users for each environment.
Identify the server owner
On managed hosting, the provider normally creates SFTP or SSH users from its control panel or through support. On a self-managed server, the system administrator must create the operating-system account, configure SSH/SFTP and assign its directory and permissions. If an agency or another vendor owns the server, request access from that organization rather than trying to derive credentials from WordPress.
Define the file task
Describe exactly what you need to do: edit a theme, install a plugin, retrieve media, repair a failed update, export a backup or inspect logs. Ask for a path restriction that covers that task. Someone who only needs media should not receive the entire WordPress root, and someone deploying a network-wide plugin may need more than an uploads-only account.
How to request or create WordPress Multisite SFTP access
- Contact the host or administrator. Use the host’s SFTP/SSH-user screen or open a support request. State the site or network name, whether you need production or staging, the date access should begin and when it can expire.
- Request the narrowest usable directory. Common scopes include the full installation,
wp-content, the plugins directory, the themes directory orwp-content/uploads. Ask whether the account can be jailed to that path so it cannot browse unrelated server data. - Choose authentication. Use an SSH key when the host supports it, especially for recurring administration or automation. If a password is required, request a unique, randomly generated password and do not reuse a WordPress password.
- Obtain connection details. The administrator should give you the hostname or IP address, SSH port (often, but not always, 22), username, authentication method and initial directory. Do not guess the port or assume the WordPress dashboard URL is the SFTP hostname.
- Confirm environment and scope in writing. Ask whether the account reaches production or staging, whether it can see the network’s shared core files, and whether it is limited to a subdirectory. Verify the account’s expiration or removal procedure.
- Test with a harmless operation. Log in, list the directory and download a non-sensitive file. Do not upload, delete or overwrite anything until the path and environment are confirmed.
Connecting with an SFTP client
Use a desktop SFTP client, a terminal SFTP command or another tool that explicitly supports SFTP over SSH. Enter the hostname, port, username and password or private-key file supplied by the administrator. WordPress’s hardening guidance recommends SFTP encryption whenever the web host provides it.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Graphical client workflow
- Create a new SFTP connection, not a plain FTP or unencrypted FTP connection.
- Enter the supplied host, port and username.
- Select password authentication or point the client to the private key that matches the public key registered by the administrator.
- Review the server fingerprint on the first connection. Confirm it through a trusted channel if the client displays a warning.
- Connect and inspect the initial directory. Look for the expected WordPress path, such as
wp-admin,wp-includesandwp-content, only if your account was meant to reach the installation root. - Download a file before editing it. Keep an untouched local copy so you can restore the previous version.
Command-line example
On systems with the OpenSSH client, the basic form is:
sftp -P 22 username@example-hostReplace the port, username and hostname with the values supplied by the host. For key authentication, specify the private key:
sftp -i ~/.ssh/wordpress_multisite username@example-hostThe command examples show syntax only; the actual hostname, port and key path are host-specific. Keep private keys protected by your operating system and never paste them into a support ticket.
How Multisite changes filesystem access
A Multisite network is a collection of sites that share one WordPress core installation. Network administration uses shared user tables, while each user still needs a role on an individual site before that user can access its dashboard. That dashboard model does not define SFTP visibility.
The host may expose the entire installation to an SFTP user, or it may restrict the account to one directory. A directory restriction can limit what the account lists and modifies, but it does not automatically understand WordPress site IDs, domains or dashboard roles. Whether an account can reach one subsite’s files depends on the server’s directory layout and access-control rules.
Recommended Free Tools
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Can one SFTP user access only one subsite?
Sometimes, but not by virtue of Multisite itself. If uploads for each site are stored in separable directories, an administrator may be able to jail an account to one uploads path. A theme or plugin change usually requires shared directories, so an uploads-only account cannot perform that work. If sites share code, a directory restriction may be unable to isolate one site’s PHP files without redesigning permissions.
Ask the administrator to describe the exact path and capabilities rather than promising that a “subsite SFTP account” is isolated. Test by listing the account’s root and attempting only permitted, non-destructive reads. A path restriction is meaningful only if the SSH account cannot escape it through another mount, symlink or service configuration.
Choosing an access arrangement
| Decision | Safer default | When broader access may be justified |
|---|---|---|
| Environment | Staging for testing; production only for approved live work | A production incident or scheduled deployment requires it |
| Filesystem scope | Only the required directory, such as uploads, plugins or themes | A network-wide repair, migration or core-level deployment needs the installation root |
| Authentication | SSH key with a protected private key | A host or workflow supports password-only access and compensating controls are in place |
| Account ownership | Host-managed account with a named owner and expiry date | Self-managed server access is appropriate when your team administers SSH and operating-system permissions |
| Network coverage | Only the files needed for the specific subsite task | Shared themes, plugins or core files must be changed for the whole network |
Exact options vary by host. Ask which restrictions are enforced by the server rather than relying on the account name or a WordPress label.
Ownership and permissions before editing
Access through SFTP does not guarantee that WordPress can write the same files. WordPress guidance says files that need write access should be owned by, or group-owned by, the account WordPress uses. On a managed server, PHP may run as a web-server user different from your SFTP user. Uploading a file as the wrong owner can make dashboard updates fail or create a security problem.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Check Site Health first
In the WordPress dashboard, open Tools > Site Health > Info and inspect the filesystem-permissions information when available. It reports write access for locations such as the main directory, wp-content, uploads, plugins and themes. Record the result before changing modes or ownership.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Important Multisite paths
Inspect wp-content/uploads because media uploads must be writable for the relevant sites. Older or specially configured installations may also use wp-content/blogs.dir, which the WordPress Multisite handbook identifies as another directory that may need write access. Do not assume every network uses that legacy path.
Avoid broad permissions
Do not “fix” a write error by making everything world-writable with mode 777. That gives every local process and, in some configurations, every service user permission to modify files. Have the administrator set ownership and the smallest practical read/write modes. Protect wp-config.php more strictly than ordinary content files because it contains database and security settings.
SFTP is not the same as WordPress’s FTP update method
SFTP login details and WordPress filesystem settings solve different problems. The FS_METHOD constant selects how WordPress’s filesystem API performs updates. Documented values include direct, ssh2, ftpext and ftpsockets. Those settings are not a request to create an SFTP account, and an SFTP account does not automatically make dashboard updates work.
Free tools Windows power users keep installed
One-click scans. No signup required.
If WordPress asks for FTP credentials during an update, first check whether the PHP process can write the target files directly and whether ownership matches the web-server account. If SSH-based updates are intended, the administrator must configure the server and the WordPress filesystem method appropriately; do not paste an SFTP password into wp-config.php as a trial fix.
Troubleshooting common failures
“Connection refused” or timeout
- Verify the hostname and SSH port exactly as supplied.
- Confirm that SFTP is enabled for the selected production or staging environment.
- Check whether a VPN, firewall or IP allowlist is required.
- Ask the host whether your account is active and whether the server accepts connections from your network.
“Permission denied” after login
- Confirm that you are in the directory assigned to the account.
- Check whether the account is read-only or restricted to a different path.
- Ask the administrator to compare the file’s owner and group with the user running WordPress.
- Do not change permissions recursively without a backup and a documented rollback plan.
The expected WordPress files are missing
The account may be jailed to uploads, a site-specific directory or a deployment folder. It may also be connected to staging instead of production. Ask the administrator to state the account’s initial directory and allowed root; do not infer scope from an empty listing.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
WordPress still asks for FTP credentials
This usually indicates a filesystem write or ownership issue, not a failed SFTP login. Review Site Health’s filesystem-permissions section, identify which directory is unwritable, and have the administrator correct ownership or configure the intended filesystem method. Keep SFTP available for controlled file operations, but do not confuse it with the dashboard’s update transport.
Files upload but the site breaks
Restore the untouched local copy, or use the host’s backup or staging environment. Check that the uploaded file belongs to the expected environment and path, that its PHP version is supported, and that only the intended plugin or theme files changed. For network-wide code, deactivate or roll back the change at the network level rather than editing one subsite’s database settings through SFTP.
Protect and revoke SFTP access
- Use a named account rather than sharing one person’s login.
- Prefer an SSH key with a passphrase and keep the private key on an encrypted device.
- Store passwords in a password manager; never send them in ordinary email, chat or a support ticket.
- Limit the account to the required environment and path.
- Keep a backup before modifying PHP, configuration or database-related files.
- Remove temporary users when the task ends.
- Rotate passwords or revoke keys when a team member leaves, a device is lost or a credential may have been exposed.
- Review server logs if the host provides them, particularly after an unexpected file change.
Because SFTP can modify site files and settings, revocation is part of completing the job, not an optional cleanup step.
A practical request template
You can send the host or administrator a request like this:
Please create an SFTP account for the staging environment of our WordPress Multisite network. The account needs read/write access only to
wp-content/themes/network-themeand should not access production or unrelated server directories. Please provide the hostname, SSH port, username, authentication instructions and account expiry date. If that path cannot be isolated because the theme is shared, please explain the smallest broader scope required.
For a media-only task, replace the theme path with the relevant uploads directory and request read/write access only for that location.
What to verify after access is granted
- Confirm the hostname and environment in the client connection profile.
- List the initial directory and compare it with the scope the administrator promised.
- Download one harmless file and verify that the transfer completes over SFTP.
- Check that you cannot browse directories outside the approved scope.
- Make a dated local backup before the first modification.
- After the change, test the affected subsite and, for shared themes or plugins, test at least one other network site.
- Ask the administrator to disable or expire the account when the work is complete.
The Bottom Line
There is no WordPress dashboard setting that reveals or grants Multisite SFTP access. The host or server administrator must create an SFTP account, define its environment and filesystem scope, and provide the connection details. Use encrypted SFTP, request only the directories you need, verify ownership before editing, and revoke temporary access when finished.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
