DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to content
VGSources
Blog

Why SCP Fails When SSH Works and How to Fix It

SSH success proves authentication, not file-transfer readiness. This guide shows how to diagnose SCP failures caused by SFTP configuration, legacy remote binaries, paths, quoting and permissions.
Length10 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A successful ssh user@host test proves that the network connection, host-key check and authentication path work. It does not prove that file transfer can start, that the server’s SFTP subsystem is enabled, that a legacy remote scp program exists, or that the source and destination paths are valid and accessible.

Modern OpenSSH clients use SFTP for scp by default (since OpenSSH 9.0). The older SCP/rcp protocol is available with -O. Identify the mode first, then test the transfer with verbose logging, absolute paths and independently checked permissions.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What a working SSH login actually proves

ssh and scp share the SSH transport and authentication mechanisms, but they do different work after login. SSH can authenticate you and start an interactive shell while file transfer fails at a later layer.

  • Transport: DNS, routing, TCP connection and SSH negotiation must succeed.
  • Authentication: the server must accept your key, password or other configured method.
  • Transfer subsystem or program: default mode starts the SFTP subsystem; legacy mode starts a remote scp process through the shell.
  • Path parsing: host separators, relative paths, wildcards, spaces, quotes and shell metacharacters are interpreted differently by each mode.
  • Filesystem access: the account needs read access to a source, write access to a destination and execute (traverse) access on every parent directory.

The OpenSSH manual describes the relationship precisely: “scp uses the SFTP protocol over a ssh(1) connection for data transfer, and uses the same authentication and provides the same security as a login session.” The shared security and login path do not make the post-authentication transfer steps identical.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

Check whether you are using SFTP mode or legacy SCP mode

OpenSSH 9.0 changed the default implementation. Without a mode option, current clients invoke SFTP over the SSH connection. Add -O (capital letter O) to request the legacy SCP/rcp protocol.

Behavior Default mode Legacy mode with -O
Protocol SFTP over SSH SCP/rcp-style transfer over a remote shell
Server requirement An enabled SFTP subsystem, normally configured as Subsystem sftp A compatible remote scp executable available in the remote account’s PATH
Wildcard handling Handled by the SFTP implementation rather than a remote shell expansion Remote wildcard expansion is performed through the remote shell
Quoting Uses SFTP path rules; legacy shell-oriented quoting can break a path Shell metacharacters and quoting are especially significant
~user paths SFTP has no native ~user expansion; an OpenSSH extension may be available on supported servers Expansion can be performed by the remote shell
Best use Normal choice when the server supports SFTP Documented compatibility with an older appliance or server that requires SCP

Prefer the default SFTP mode whenever possible. Use -O only when a specific compatibility requirement has been identified; switching modes changes path and wildcard semantics and can expose a different server-side failure.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Run a layer-by-layer diagnostic

Run these commands from the same account, working directory and machine where the failure occurs. Replace the example paths with real ones, preferably absolute paths.

  1. Confirm the SSH session with maximum client logging:

    ssh -vvv user@host

    Look for successful key exchange and authentication. A successful shell prompt does not confirm SFTP availability.

  2. Test the transfer in the current (normally SFTP) mode:

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
    Rank #2
    Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
    • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
    • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
    • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
    • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
    • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
    scp -vvv ./local-file user@host:/absolute/remote/path/

    Keep the complete error and the first subsystem or path-related failure. Later messages can be consequences of the first error.

  3. Inspect the remote account’s environment and the destination:

    ssh user@host 'pwd; command -v scp; ls -ld /absolute/remote/path'

    pwd reveals the base directory used by relative paths, command -v scp reveals whether a legacy binary is available, and ls -ld shows whether the destination exists and what type it is.

  4. If you suspect legacy compatibility, repeat the transfer explicitly:

    Free tools Windows power users keep installed

    One-click scans. No signup required.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
    scp -O -vvv ./local-file user@host:/absolute/remote/path/

    Do not interpret a different result as proof that one mode is universally better; it means the two server-side requirements differ.

How to read the verbose output

  • Authentication succeeds, then SFTP startup fails: inspect the server’s SFTP subsystem configuration and the path to sftp-server. A shell that starts normally does not establish that the subsystem is enabled.
  • The log says a remote scp command is missing: you are using legacy mode, explicitly or through a wrapper. Either remove -O and use SFTP, or install/configure a compatible remote binary in the account’s PATH.
  • “No such file” or “not a directory”: verify the exact path, its starting directory and whether the final component is a file or directory. Replace relative and tilde paths with an absolute path.
  • “Permission denied”: test source readability, destination writability and traversal permission on every parent directory separately.
  • Failures involving spaces, quotes, wildcards or a colon: simplify to a plain temporary filename, then add the special characters back with mode-appropriate quoting.

Fix an unavailable SFTP subsystem

In default mode, scp asks SSH to start the server’s SFTP subsystem. On the server, an administrator should inspect the effective SSH daemon configuration for a line such as Subsystem sftp ..., commonly pointing to sftp-server or an internal implementation. The executable must exist, be executable and be permitted by the server’s security policy.

Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

Check the server’s SSH daemon logs at the timestamp of the transfer. They can distinguish a missing subsystem executable, a malformed configuration, a chroot path problem or a policy denial. After correcting configuration, reload or restart the SSH service according to that system’s administration procedure, then rerun scp -vvv.

Do not “fix” subsystem errors by disabling host-key checking or weakening authentication. Those settings are unrelated to starting SFTP and reduce security without addressing the transfer failure.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Fix “scp: command not found” and other legacy-mode errors

The legacy protocol launches a remote scp command. Minimal or restricted accounts often have a different PATH from an interactive login, and appliances may provide SFTP but no SCP binary. The OpenSSH project notes that commands are usually installed in the remote system’s PATH; when they are not, transfers fail.

Use the diagnostic command below as the same account that performs the copy:

ssh user@host 'printf "PATH=%sn" "$PATH"; command -v scp; ls -l "$(command -v scp 2>/dev/null)"'

If no path is returned, do one of the following:

  • Use normal SFTP mode by removing -O, provided the server has a working SFTP subsystem.
  • Install the server’s compatible SCP implementation and place it in the account’s permitted PATH.
  • Correct a restricted account or forced-command configuration that hides the binary, following the server vendor’s documented setup.

Do not assume that installing a client-side scp fixes this error; the missing program is on the remote side in legacy mode.

Make the source and destination paths unambiguous

Use absolute paths while troubleshooting

A relative remote path is resolved from the remote account’s starting directory, which may differ between an interactive shell, a forced command and an SFTP session. Replace uploads/file.bin with a known path such as /srv/uploads/file.bin, and verify it with ls -ld or test -e.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

For a destination directory, include a trailing slash only when that directory is known to exist. If the final component does not exist, scp may interpret it as a new filename; if it exists as a regular file, a directory-style destination produces “not a directory.”

Handle home-directory and tilde syntax carefully

Remote shell expansion can interpret ~ and ~user in legacy mode. SFTP has no native ~user expansion; some supported OpenSSH servers provide an extension, but it is not portable. Use the account’s absolute home path when reliability matters.

Prevent a colon in a local filename from becoming a host specification

scp uses a colon to separate host:path. A local filename such as save:1.dat can therefore be parsed as a remote specification. Make the local path explicit with an absolute or relative prefix:

scp ./save:1.dat user@host:/absolute/remote/path/

or:

scp /home/me/save:1.dat user@host:/absolute/remote/path/

Confirm the local file with ls -l -- ./save:1.dat before copying.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Quote spaces, wildcards and shell metacharacters correctly

First test with a simple filename such as test.bin. Then quote each path as one shell argument when it contains spaces, semicolons, dollar signs, parentheses or other metacharacters:

scp './builds/Release Candidate/app package.zip' 'user@host:/srv/releases/Release Candidate/'

In SFTP mode, the local shell still parses your command, but the remote path is handled by SFTP. Quoting that is appropriate for a local shell can become wrong if you copy legacy examples that add another layer of remote-shell quotes. If a path with spaces fails only in default mode, remove unnecessary legacy double-quoting and test a single shell-quoted argument.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.

Wildcards are a major compatibility boundary. Legacy SCP sends patterns through the remote shell, so expansion depends on the remote shell, its options and the directory contents. SFTP mode avoids that brittle remote-shell expansion. For a predictable result, copy one known file first; for multiple files, use a mode whose wildcard behavior you have verified and quote the complete remote specification.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Separate authentication from filesystem permissions

“Permission denied” can refer to several independent checks. An account may authenticate successfully yet lack one of the permissions needed for transfer.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For a download (remote to local)

  • The remote account needs read permission on the source file.
  • The account needs execute permission on every parent directory so it can traverse to that file.
  • Your local account needs write permission in the local destination directory.

For an upload (local to remote)

  • Your local account needs read permission on the source file and execute permission on its parent directories.
  • The remote account needs write permission on the destination directory.
  • The remote account needs execute permission on every parent directory.
  • If replacing an existing file, directory permissions and ownership can matter even when the file itself is writable.

Check each layer as the relevant account:

ssh user@host 'test -r /absolute/remote/source && echo readable || echo not-readable; test -w /absolute/remote/directory && echo writable || echo not-writable; ls -ld / /absolute /absolute/remote /absolute/remote/directory'

On the local machine, use test -r, test -w and ls -ld for the same checks. ACLs, group membership, SELinux or other mandatory-access controls can deny an operation even when the mode bits look sufficient; server logs and an administrator’s policy check are required in that case.

Use the right connection options

A transfer can fail because it is reaching a different host, port or account than your successful login test. Keep the connection parameters identical while troubleshooting.

Option Purpose Example
-P Connect to a non-default SSH port scp -P 2222 file user@host:/path/
-i Use a specific identity file scp -i ~/.ssh/id_ed25519 file user@host:/path/
-F Use a particular SSH client configuration scp -F ~/.ssh/work_config file user@host:/path/
-J Connect through a jump host scp -J bastion.example file user@host:/path/
-O Select legacy SCP/rcp mode scp -O file user@host:/path/
-X Pass SFTP-specific options in default mode scp -X help file user@host:/path/

The capital -P is the port option; lowercase -p preserves file times and modes. Check the effective settings with ssh -G user@host when an SSH configuration alias may be changing the hostname, port, identity or proxy command.

Match common errors to the failing layer

Error or symptom Likely cause Targeted fix
scp: Connection closed immediately after authentication SFTP subsystem startup failure, forced command or server policy termination Read scp -vvv and server logs; verify the SFTP subsystem and account restrictions.
scp: command not found Legacy mode cannot find remote scp Remove -O for SFTP, or install and expose a compatible remote binary.
No such file or directory Wrong relative base, misspelled path, absent file or unsupported tilde expansion Use an absolute path and verify it with pwd, ls -ld and test -e.
Not a directory A path component is a file, or a directory was assumed to exist Inspect every component and correct the destination type or trailing slash.
Permission denied Missing read, write or traverse permission; ACL or security policy denial Test each permission independently and inspect server security logs.
Wildcard copies nothing or the wrong files Different expansion rules between SFTP and legacy shell mode Copy a single explicit file, then apply mode-appropriate quoting and wildcard handling.
A filename containing : is treated as a host Local path parsed as host:path Prefix the local name with ./ or use its absolute path.
Failure began after an OpenSSH upgrade The client switched from legacy SCP to default SFTP in OpenSSH 9.0 Fix SFTP support and paths, or use -O temporarily for a documented compatibility case.

When legacy -O is justified

Use legacy mode only when the remote system documents that requirement, lacks a usable SFTP subsystem, or has SCP-specific behavior you must preserve. Confirm all of the following first:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • The remote account can execute a compatible scp binary.
  • The binary is in the non-interactive account’s PATH, or the server’s configuration supplies it correctly.
  • The remote shell and its quoting rules are compatible with your paths and wildcard use.
  • You understand that ~user, wildcard expansion and shell metacharacters may behave differently from SFTP mode.

If none of these conditions is a documented requirement, default SFTP mode is the less brittle choice and avoids dependence on a remote shell-launched program.

What to collect when the generic fixes do not work

Do not guess at security settings or repeatedly change command syntax. Capture the exact command with secrets removed, the complete -vvv output, the client and server OpenSSH versions, the operating-system or appliance type, the effective SSH configuration, and the server log entry at the same time. Include whether the failing operation is upload or download, the exact source and destination, whether each path contains spaces, wildcards, ~ or a colon, and whether default mode and -O produce different errors.

That information identifies whether the failure is transport, authentication, subsystem startup, remote-program discovery, path parsing or filesystem policy—and each layer has a different fix.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.