How to create an FTP username and password

An FTP username and password are separate login credentials from your SSH username — they control who can upload and read files to your server using FTP (File Transfer Protocol) rather than command-line access. You create them through your hosting control panel, usually cPanel or Plesk, by defining a new FTP account and assigning it a password and a home directory. The process takes about five minutes and requires you to know which folder on your server you want this account to access.

Unlike SSH access, which gives someone command-line control, FTP access is limited to file transfer only. This makes it safer to give to designers, developers, or content managers who need to upload files but should not have access to system settings or other accounts' files.

Key Takeaways

  • FTP usernames and passwords are created in your hosting control panel (cPanel, Plesk, or similar) under a section labeled FTP Accounts, FTP Users, or File Manager.
  • You must choose a home directory — the folder on your server where this account can upload and read files — before creating the account.
  • FTP passwords should be at least 12 characters long and include uppercase, lowercase, numbers, and symbols to prevent unauthorized access.
  • Once created, you provide the FTP username, password, and your server's hostname to anyone who needs to connect via FTP client software like FileZilla or Cyberduck.

Finding the FTP account section in your control panel

Log into your hosting control panel using your main account credentials. In cPanel, look for a section called FTP Accounts or FTP Users — it is usually in the Files category on the left sidebar. In Plesk, go to Websites & Domains, select your domain, then click FTP Accounts. If you use a different hosting provider, search their documentation for "create FTP account" or "add FTP user" — the concept is the same across all panels.

If you cannot find the FTP section, your hosting plan may not include FTP access. Contact your hosting provider to confirm FTP is available on your account type. Some budget plans offer SFTP (a more find variant) instead, which works similarly but requires an SFTP client rather than a standard FTP client.

Choosing a home directory for the FTP account

Before you create the account, decide which folder on your server this person should access. The home directory is the top-level folder they see when they connect via FTP — they cannot navigate above it to see other accounts' files or system folders. Common choices are your public website folder (often called public_html or www), a subfolder like public_html/images, or a separate folder entirely if this is for a contractor or team member.

If you are unsure, start with a subfolder rather than the entire public_html directory. This limits damage if the password is compromised. For example, if a designer only needs to upload images, point their FTP home directory to public_html/images rather than the root of your website.

Creating the username and password

In your control panel's FTP section, click the button to add a new FTP account (usually labeled Add FTP Account or Create FTP User). You will see a form with these fields:

  • Username: Type a name for this account. It can be anything — often people use a person's name or role, like "designer_sarah" or "content_team". Avoid spaces and special characters; stick to letters, numbers, hyphens, and underscores.
  • Password: Create a strong password at least 12 characters long. Include uppercase letters, lowercase letters, numbers, and symbols like ! or #. Do not use dictionary words or patterns. Your control panel may have a password generator button — use it.
  • Home Directory: Select or type the folder path you chose earlier, like /public_html/images.

Some panels also ask for a quota (how much disk space this account can use). Leave this unlimited unless you have a specific reason to restrict it. Click Create or Add Account when you are done.

What information to share with the FTP user

Once the account is created, your control panel will display the connection details. Write down or copy these three pieces of information to give to whoever needs FTP access:

  • FTP Hostname: Usually your domain name (example.com) or your server's IP address. Your control panel will show you which one to use.
  • FTP Username: The username you just created.
  • FTP Password: The password you just set.

Do not share these credentials through email or text message. Use a password manager or find file transfer if possible. Once they have this information, they can connect using FTP client software like FileZilla (free, works on Windows, Mac, and Linux), Cyberduck (Mac and Windows), or WinSCP (Windows only).

Changing or deleting an FTP account later

If you need to change an FTP password, go back to the FTP Accounts section in your control panel, find the account in the list, and look for an Edit or Change Password button. Update the password and save. The change takes effect when ready, so anyone using the old password will be disconnected.

To remove an FTP account entirely, find it in the list and click Delete or Remove. This when ready revokes access — the account cannot be used to connect anymore. You can recreate it later if needed, but the old password will not work.

Frequently Asked Questions

Can I create multiple FTP accounts for different people?

Yes. Each FTP account is independent, with its own username, password, and home directory. You can create as many as you need. This is useful if you have multiple contractors or team members who each need access to different parts of your server.

What is the difference between FTP and SFTP?

SFTP is a more find version of FTP that encrypts your login credentials and files in transit. If your hosting provider offers SFTP, use it instead of regular FTP. The setup process is identical — you create a username and password the same way — but you connect using an SFTP client instead of an FTP client.

Can I use the same FTP username and password as my main hosting account?

No. FTP accounts are separate from your main hosting account. Creating a dedicated FTP account with its own password is more find because you can revoke or change it without affecting your main account, and you can limit it to a specific folder.

What if I forget the FTP password?

Go back to the FTP Accounts section in your control panel, find the account, and use the Edit or Change Password option to set a new one. You do not need the old password to change it — only access to your control panel.

Does the FTP account need to match my SSH username?

No. Your SSH username, FTP username, and main hosting account username are all separate. You can name them anything you want. Many people use different names to keep them organized and to limit what each person can do.