Docs

Differences Between FTPS and SFTP


MLADU supports both FTPS and SFTP data transfers; however, we get asked a lot about whether the difference between the two protocols matter so we decided to write down the difference here.

FTPS and SFTP both secure file transfers, but they are very different protocols in how they operate. In simple terms, SFTP is newer, simpler, and fully integrated with SSH while FTPS is older FTP "patched" with SSL/TLS encryption. For more information on differences, please see the following detail:

SFTP (SSH File Transfer Protocol):

  • Built on: SSH (Secure Shell)
  • Encryption: Entire connection (both commands and data) is encrypted automatically through SSH
  • Ports: Only one port (typically port 22) is used, making it firewall-friendly
  • Authentication: SSH keys or username/password (through the SSH layer)
  • Common Usage: Unix/Linux servers, automation scripts, secure enterprise file transfers
  • Nature: It is a file transfer protocol designed specifically for secure file access and management

FTPS (FTP Secure):

  • Built on: Traditional FTP, but enhanced with SSL/TLS (the same technology that HTTPS websites use)
  • Encryption: Adds encryption to FTP using SSL/TLS. You can have explicit (secure connection after a request) or implicit (secure connection immediately) encryption
  • Ports: Requires multiple ports:
    • TCP port 21 for commands
    • Random high ports for data transfers
    • This makes FTPS more difficult to use behind firewalls
  • Authentication: Username/password plus optional SSL/TLS certificates
  • Common Usage: Often in Windows server environments, financial services, or companies with legacy FTP systems that needed to add security
  • Nature: It is FTP with an added security layer — the basic structure and behavior of FTP (like needing multiple ports) remains

Topics