Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
sftp-server.exe is the OpenSSH SFTP subsystem on Windows. The sshd service starts it when an SFTP client connects, unless the server is configured to use OpenSSH’s built-in internal-sftp subsystem instead. A copy installed with OpenSSH is normally legitimate, but the filename alone proves nothing: verify its location, digital signature, and installation source. Missing-file, connection-hang, authentication, chroot, and access-denied errors are usually fixed by validating sshd‘s configuration, correcting the subsystem path or NTFS permissions, checking keys, and reading the OpenSSH logs before considering a reinstall.
What does sftp-server.exe do on Windows?
Microsoft’s OpenSSH package provides Secure File Transfer Protocol (SFTP) capability. In the usual configuration, the Windows sshd service accepts an SSH connection and launches sftp-server.exe as the SFTP subsystem for that session. The standard configuration entry is:
As an Amazon Associate I earn from qualifying purchases.
Subsystem sftp sftp-server.exeThe process is therefore normally short-lived and connection-driven, not a program that should run continuously like a desktop application. If no SFTP client is connected, you may see no sftp-server.exe process at all. A server administrator can instead use ForceCommand internal-sftp in a Match block. That keeps the SFTP implementation inside sshd, so a separate executable may not appear even though SFTP works.
OpenSSH can be installed through Windows optional features or from a manually installed Win32-OpenSSH package. The optional-feature installation commonly stores binaries in %WINDIR%System32OpenSSH; a manual package can use a different directory, so do not assume every valid installation has the same path.
Popular on Amazon
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Is sftp-server.exe safe?
A genuine file from a trusted OpenSSH installation is expected software. The name is not an identity check, however: malware can copy a familiar filename. Treat the file’s path, signer, and provenance as separate checks.
Check the path and publisher
In an elevated PowerShell window, inspect the file you actually found rather than checking only the usual path:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Get-ChildItem -Path $env:WINDIRSystem32OpenSSHsftp-server.exe -ErrorAction SilentlyContinue
Get-Command sftp-server.exe -ErrorAction SilentlyContinueA file under the OpenSSH installation directory is more consistent with a normal setup than one in a user-writable temporary, downloads, or profile directory. Location is only a clue; continue with signature verification.
Verify the Authenticode signature
Replace the example path with the full path reported on your computer:
Get-AuthenticodeSignature -LiteralPath 'C:WindowsSystem32OpenSSHsftp-server.exe' | Format-ListLook for a valid status and a signer you recognize as belonging to the OpenSSH distribution used by your installation. Microsoft notes that unsigned files leave the signature fields blank. You can also use SignTool from the Windows SDK:
signtool verify /pa /v C:WindowsSystem32OpenSSHsftp-server.exeSignature verification establishes that the signed file has not been altered since signing and that its certificate chains to a trusted source. It does not, by itself, prove that every surrounding configuration choice is safe.
Compare a release hash when you installed a package manually
For a package obtained from the official Win32-OpenSSH project, calculate the local SHA-256 value and compare it with the hash published for the exact asset and version you downloaded:
Also popular on Amazon
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Get-FileHash -Algorithm SHA256 -LiteralPath 'C:PathTosftp-server.exe'The project’s release page lists a 10.4.0.0p1-Preview release dated 2026-10-20, with Windows MSI and ZIP assets and their hashes. Match architecture, package type, and version; a hash from a different asset is not a valid comparison.
What to do when verification fails
If the file is in an unexpected writable directory, has an unknown or invalid signature, fails the release-hash comparison, or behaves unlike an OpenSSH component, do not replace it with a random download. Update Microsoft Defender security intelligence and run a full scan. For persistent unwanted software, Microsoft Defender Offline can scan outside the normal Windows session. No authoritative published statistic establishes how often malicious files use this particular filename, so a percentage-based risk claim would be misleading.
Why is sftp-server.exe running?
sshd starts the external subsystem when an SFTP client logs in. File transfers, directory listings, and session setup can keep it present until that connection closes. Seeing it briefly in Task Manager after a legitimate SFTP connection is expected; seeing it launch without a connection calls for checking scheduled jobs, service configuration, and the file’s path.
What is the difference between external sftp-server.exe and internal-sftp?
Both provide SFTP, but they differ in process visibility and configuration. The choice is made in sshd_config, often globally with a Subsystem line or per account inside a Match block.
| Characteristic | External subsystem | internal-sftp |
|---|---|---|
| Process | sshd launches a separate sftp-server.exe process for the session. |
SFTP runs inside sshd; a separate process may not be visible. |
| Configuration | Requires a valid executable name or path in the Subsystem directive. |
Uses ForceCommand internal-sftp, commonly within a Match block. |
| Path failures | Can fail when the executable is missing or the configured path is wrong. | A separate executable-path failure does not apply. |
| Logging and options | Subsystem command-line options can be supplied on the Subsystem line. |
Options and logging are controlled through the built-in subsystem and surrounding sshd configuration. |
| Chroot use | Must follow the OpenSSH chroot and NTFS-permission requirements. | Often selected for chrooted SFTP configurations, but the same ownership and permission rules still matter. |
How do I fix sftp-server.exe errors on Windows?
Work through the checks in order. Validate configuration before restarting, make one change at a time, and keep a copy of the current configuration so you can undo an unsuccessful edit.
1. Identify OpenSSH, the executable, and the service
Open an elevated PowerShell window and establish which installation Windows is using:
Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH*'
Get-Service -Name sshd -ErrorAction SilentlyContinue
Get-Command sshd.exe -ErrorAction SilentlyContinue
Get-ChildItem -Path $env:WINDIRSystem32OpenSSHsftp-server.exe -ErrorAction SilentlyContinueIf sshd is not installed or the service does not exist, install or repair the OpenSSH Server feature using the Windows edition’s supported optional-feature method. If a manual package is present, locate its actual directory and note how its service was registered.
Recommended Free Tools
Also popular on Amazon
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
2. Validate sshd_config before restarting
Open the server configuration at %ProgramData%sshsshd_config and check the subsystem entry. A typical external configuration is:
Subsystem sftp sftp-server.exeRemove accidental trailing characters or spaces on that line and confirm that the executable is in the directory searched by this installation. From an elevated shell, run the configuration test using the sshd.exe belonging to the service:
sshd -tMicrosoft recommends this test after every OpenSSH configuration change. Do not restart a production service until it returns without a configuration error; a bad edit can prevent new SSH connections.
3. Repair a missing subsystem or incorrect path
For a “subsystem not found,” “cannot open,” or missing-file error, first confirm that sftp-server.exe exists in the OpenSSH installation directory. If the package uses a nonstandard directory, change the Subsystem directive to the executable path supported by that installation, preserving the syntax used by the package. Re-run sshd -t, then restart the service:
Restart-Service -Name sshdTest with the same SFTP client and account that originally failed. Do not copy an executable from an unrelated computer or an unofficial download; version and architecture mismatches can create new failures.
4. Check whether the service is running and whether the connection is reaching it
Use:
Get-Service -Name sshd
Get-NetTCPConnection -LocalPort 22 -State Listen -ErrorAction SilentlyContinueA stopped service or no listening socket points to service startup, firewall, or port configuration rather than to an SFTP subsystem permission problem. If SSH login works but the SFTP channel hangs, continue with subsystem validation and logging instead of repeatedly restarting the client.
5. Fix chroot and “access denied” errors
ChrootDirectory must reference a local Windows path, not a UNC path. The chroot root should be owned by SYSTEM or Administrators and protected from user write access; provide the account’s write permission in a child directory such as upload. Inspect the effective ACLs before changing them:
Also popular on Amazon
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
icacls 'C:SFTPjane'
icacls 'C:SFTPjaneupload'Repair only the intended folders and substitute the real account names. For example, a protected root and writable child can be configured along these lines:
Free tools Windows power users keep installed
One-click scans. No signup required.
icacls 'C:SFTPjane' /inheritance:r
icacls 'C:SFTPjane' /grant 'SYSTEM:(OI)(CI)(F)' 'Administrators:(OI)(CI)(F)'
icacls 'C:SFTPjaneupload' /grant 'jane:(OI)(CI)(M)'The exact ACLs depend on your security policy. If the user can enter the chroot but cannot upload, inspect the child directory’s permissions, ownership, and available disk space rather than granting write access to the chroot root.
6. Correct password and public-key authentication
Authentication failures occur before SFTP file permissions are evaluated. Confirm the username, password policy, and public-key contents. Check that the user’s authorized-keys file is in the location specified by your configuration and is readable only by the appropriate account and administrators.
For administrator accounts, Microsoft documents the shared file C:ProgramDatasshadministrators_authorized_keys. Inspect and correct its ACLs, then restart sshd after changing the file or its permissions:
icacls 'C:ProgramDatasshadministrators_authorized_keys'Do not paste private keys into the server or broaden permissions simply to make a login succeed. A key that works for SSH but fails for SFTP can still indicate a subsystem, account restriction, or Match-block problem.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →7. Turn on focused diagnostics for hangs and unexplained failures
In %ProgramData%sshsshd_config, temporarily set:
SyslogFacility LOCAL0
LogLevel DEBUG3For an external subsystem, the documented diagnostic form adds options to the subsystem command:
Subsystem sftp sftp-server.exe -f LOCAL0 -l DEBUG3Run sshd -t, restart the service, reproduce one failed connection, and inspect %ProgramData%sshlogs together with Event Viewer. Look for the account selected by a Match block, the resolved subsystem command, authentication results, chroot changes, and NTFS access errors. Return logging to an appropriate level after troubleshooting because DEBUG3 can produce large, sensitive logs.
Also popular on Amazon
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
8. Reinstall only after configuration and permissions checks
If the service still will not start or SFTP continues to hang after configuration validation, path checks, ACL review, authentication checks, and log analysis, uninstall and reinstall the OpenSSH component or package using the same trusted source and architecture. Back up %ProgramData%ssh first, record any custom host keys and configuration, and reapply settings gradually. Reinstallation is a fallback, not a substitute for identifying a bad path or permission.
What should I check when the error says the file is missing?
- Confirm which
sshd.exeservice instance is running and which directory it uses. - Search the corresponding OpenSSH directory for
sftp-server.exe; do not rely on a copy found elsewhere on the disk. - Check the
Subsystemline for spelling, unsupported arguments, and an incorrect relative or absolute path. - Run
sshd -tbefore restarting. - Install or repair the matching OpenSSH package if the signed binary is genuinely absent.
What should I check when SFTP connects but hangs?
- Verify that the service is listening on the expected port and that ordinary SSH authentication completes.
- Use DEBUG3 logs to determine whether the hang occurs while starting the subsystem, entering a chroot, or opening the requested directory.
- Test with a simple local path and a non-chrooted test account, if policy permits, to separate subsystem problems from directory ACLs.
- Check that the configured subsystem is not invoking a missing executable or an incompatible command-line option.
- After collecting evidence, restore normal logging and remove temporary test accounts or permissions.
If you prefer an automated shortcut after trying the manual checks, Outbyte PC Repair can address certain common Windows system-element, settings, cache, and application-crash issues and includes an app-crash log. It is optional, complements an antivirus rather than replacing one, runs on Windows 11, 10, 8, and 7, and offers a category-based free trial of at least two days before subscription; results vary and no tool repairs every crash.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsFrequently asked questions
Can I delete sftp-server.exe to stop it from running?
No. Deleting it can break SFTP for every account that uses the external subsystem and may leave the OpenSSH installation inconsistent. If it launches unexpectedly, verify the parent sshd service, connection history, path, and signature instead of removing the binary.
Does Windows need sftp-server.exe if I never use SFTP?
No SFTP session means the external process normally does not run, but the file may remain installed as part of OpenSSH Server. You can disable or remove the OpenSSH Server feature if you do not need SSH administration, provided you account for any scripts or remote-management workflows that depend on it.
Why does my SFTP client show “permission denied” after login succeeds?
Successful authentication proves the credentials were accepted, not that the account can write to the requested directory. Check the chroot root ownership, the child upload directory’s NTFS ACL, the effective account name, and whether the target path exists inside the chroot.
Will switching to internal-sftp fix every sftp-server.exe error?
No. It can remove a separate executable-path problem, but authentication, chroot ownership, NTFS permissions, port access, and malformed sshd_config entries can still fail. Validate the configuration and review logs after any switch.
Frequently Asked Questions
Can I run two OpenSSH installations that contain different sftp-server.exe files?
It is possible to have a manual package alongside the Windows optional feature, but the service uses one registered configuration and executable path. Remove ambiguity by checking the service binary path, the active sshd configuration, and the signature of the file that configuration resolves.
Should I expose SFTP directly to the internet while troubleshooting?
Avoid changing firewall or router exposure merely to test a local configuration. Reproduce the problem on a trusted network or through an approved secure access path, and apply least-privilege accounts and keys before any remote deployment.
Where are OpenSSH server logs stored on Windows?
With the documented LOCAL0 logging configuration, inspect the OpenSSH log files under %ProgramData%sshlogs and the related entries in Event Viewer. The exact event details depend on the configured log level and the stage at which the connection fails.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →
