Sooner or later, every WordPress owner hears the same advice: “Just connect over FTP.” If you have never done it, that sentence can sound like a foreign language. The idea is simple, though. FTP access gives you a way to reach the files on your web server directly, without logging in to WordPress.

This guide explains what FTP access is, why it matters, and how to use it step by step. You will also learn the safer SFTP option, the file tasks it handles best, and how to fix the most common connection errors.

What FTP Access Means

FTP stands for File Transfer Protocol. It is a standard way to move files between your computer and a web server. Think of it as a file manager for your hosting account. You can see folders, upload files, download them, rename them and delete them.

Your WordPress site is made of files. Core files run WordPress, theme files control the design, plugin files add features, and the uploads folder holds your images. With FTP access you can open any of these folders and work on the files themselves. WordPress does not need to be working for this to function.

“FTP access” usually refers to the login details that let you connect. Those details are a host name, a username, a password and a port number. Your hosting company creates them, and you use them inside a small program called an FTP client. Anyone who holds these details can change your site files, so treat them like a password.

Why WordPress Site Owners Use FTP

Most day-to-day work happens inside the WordPress dashboard. FTP matters when the dashboard is not available or when a task is easier at file level.

The classic case is a site that has crashed. If a bad plugin or theme triggers a white screen or a critical error, you cannot reach the dashboard to turn it off. With FTP you can rename the plugin folder, and WordPress then stops loading it. Our guides on fixing the WordPress white screen of death and on fixing the critical error in WordPress both rely on this method.

Other common uses include uploading a theme or plugin that is too large for the dashboard upload limit, downloading a full copy of your site files, and editing a configuration file when settings must change outside the dashboard. FTP is also handy for moving a site to a new host, because you can copy folders in bulk and keep the original structure.

FTP, FTPS and SFTP: Which One Should You Use

Plain FTP sends everything in readable form. That includes your password. On an open network, someone could capture it. For that reason, most hosts now push their customers toward a secure option, and you should choose one whenever it is offered.

FTP is the original protocol and uses port 21. It is not encrypted. FTPS is FTP with an added encryption layer, and it also normally uses port 21. SFTP is a different protocol that runs over SSH. It uses port 22 and encrypts both the login and the data.

The names look alike, so people mix them up. They are not interchangeable. Your FTP client needs to be set to the same protocol your server expects, or the connection fails.

Use SFTP if your host offers it, and FTPS if it does not. Use plain FTP only when nothing else is available. Check your hosting panel to see which protocols your plan supports. Some hosts also require you to switch SSH access on before SFTP works, so look for that setting if your first attempt is refused.

How to Get Your FTP Details

You need four items before you can connect: a host, a username, a password and a port. Your hosting company provides all four.

Log in to your hosting control panel and look for a section called FTP Accounts, File Access or SFTP/SSH. The exact name changes from host to host. Many panels show the host name and port on the same page, and some email the details when you first sign up.

If your plan lists a main FTP account, you can use it. A better habit is to create a separate account for each person or task. Set its home folder to your WordPress folder, which is often called public_html or carries your domain name. Then a helper cannot wander into other sites on the same account.

If you cannot find the details, ask your host’s support team. Never accept FTP details sent in plain email if you can avoid it, and change the password after any outside person finishes their work. If you forget the password, reset it in the hosting panel. Do not ask a stranger to guess it for you.

How to Connect to Your Site Step by Step

You connect through an FTP client. This is a free program that you install on your computer. Pick a well-reviewed client from a trusted source and download it from the official website only.

Set up a new connection

Open the client and create a new site or connection. Choose the protocol that matches your host, such as SFTP. Type your host name in the host box and your port number in the port box. Choose a “normal” login type, then enter your username and password. Save the connection so you can reuse it.

Click Connect. The first time, you may see a prompt about a server key or certificate. This is normal. Check that the host name is correct, then accept it. The client now shows your computer on the left and your server on the right.

Find your WordPress folder

On the server side, open the folder that holds your site. You will know you are in the right place when you see wp-admin, wp-content, wp-includes and a file named wp-config.php. If you see none of these, go up a level or open public_html.

Inside wp-content you will find the plugins, themes and uploads folders. These are the three you will use the most. To move a file, drag it from one side to the other. Wait until the transfer queue is empty before you close the program.

Everyday Tasks You Can Do With FTP

Once you are connected, a handful of jobs cover most real needs. Each one below is safe if you follow the backup advice first.

Turn off a broken plugin. Open wp-content/plugins and rename the plugin’s folder, for example by adding “-off” to the end. WordPress can no longer find it, so it stays inactive. If your site returns, you have found the cause. Rename the folder back later and test again, or remove the plugin.

Switch to a default theme. If a theme breaks the site, rename the active theme’s folder inside wp-content/themes. WordPress falls back to a default theme if one is installed. Make sure you keep at least one default theme on the server for this reason.

Download a copy of your site. Select the WordPress folder and download it to your computer. This takes a while on large sites. It protects your files, but it does not include the database, so you still need a database backup. Our guide on how to back up and restore WordPress and WooCommerce covers both parts.

Edit a configuration file. Some fixes need a change inside wp-config.php, such as raising the memory limit. Always download a copy of the file first and keep it safe. A single typo can take the whole site offline, and the copy lets you put the original back in seconds.

Understand File Permissions

Every file and folder on your server has a permission setting. It decides who can read, write or run the item. FTP clients let you view and change these settings, and wrong values cause many hard-to-trace problems.

Permissions are written as three numbers. The common safe values for WordPress are 755 for folders and 644 for files. The file wp-config.php is often set stricter, such as 600 or 640, because it holds your database login. Your host may recommend slightly different numbers, so check their guidance first.

Avoid setting anything to 777. That value lets anyone on the server write to the item, and attackers look for exactly that mistake. If a plugin asks you to set 777 to work, treat that as a warning sign and look for another way.

To change a value in most clients, right-click the file or folder and choose File Permissions. Type the number and, for a folder, decide whether to apply the change to its contents. Applying a change to everything inside a folder can break files that need different values, so do it only when you are sure.

Keep FTP Access Safe

Because FTP can change every file on your site, it is a target. A few simple habits cut the risk a lot.

Use SFTP or FTPS rather than plain FTP. Use a strong, unique password, and never reuse the one from your WordPress login or your email. Create separate accounts for separate people, and delete accounts when the work ends. Many hosts also let you limit FTP logins to specific IP addresses, which is worth switching on if you always work from the same place.

Take a backup before every session in which you change files, and keep your client up to date, because old versions can carry known security flaws. Do not save passwords on a shared computer. If you ever suspect a leak, change the FTP password at once, then scan the site for files you do not recognise. Unknown files in wp-content or in the site root are a common sign that someone gained access.

Fix Common FTP Connection Problems

Connection errors are the biggest source of frustration. The messages look scary, but the causes are usually small.

Login incorrect or authentication failed. Check the username and password for extra spaces. Many hosts add your domain to the username, so the full name might look like user@yourdomain.com. Reset the password in the hosting panel if you are unsure.

Connection timed out or refused. Check the host name and port. A wrong protocol is a frequent cause, for example trying FTP on port 22. Also try switching between active and passive mode in your client’s settings. Passive mode works better behind most home routers and firewalls.

Can connect but cannot upload. This points to a permission problem or a full disk. Check that the target folder allows writing and that your hosting account still has free space. Our guide on how to clear the WordPress cache can help after a file change does not appear on the live site, since the cache may still show the old version.

If none of these steps help, the team at 24×7 WP Support works on file access, plugin conflicts and site recovery for WordPress owners every day.

Related posts:

Does WordPress Support Email and SMTP? How to Send Emails From WordPress? Complete Guide

What Is WordPress? How It Works, Benefits, Pros and Cons

Steps for WooCommerce TalentLMS integration

How to Add Autocomplete Search to Your WordPress Website?

What Is Pantheon in WordPress? Hosting, Pricing, and Setup Guide

Brian

Brian is a WordPress support specialist and content contributor at 24×7 WP Support. He writes practical, easy-to-follow guides on WordPress troubleshooting, WooCommerce issues, plugin and theme errors, website security, migrations, performance optimization, and integrations. With a focus on solving real website problems, Brian helps business owners, bloggers, and online store managers keep their WordPress sites running smoothly.