SFTP In Depth

SFTP has become the default answer to “how should we transfer files securely?” — and for good reason: one port, strong encryption, and authentication that can be fully key-based. But SFTP is also widely misunderstood, starting with its name: it is not FTP with security added, it is a different protocol that rides inside SSH.

This series explains SFTP properly: the architecture, the authentication options and their tradeoffs, the server-side lockdown knobs, why transfers sometimes feel slow and what actually helps, and how to automate SFTP jobs without leaving passwords lying around. Windows admins are first-class citizens throughout — including where POSIX-shaped behavior meets Windows servers.

Articles in This Series

• How SFTP Actually Works: The SSH Subsystem Architecture
  SSH layers and channels, and why “FTP over SSH” is the wrong mental model.
• SFTP Is Not FTPS: Ending the Confusion for Good
  The naming mess and its practical consequences — ports, keys vs certificates, firewalls.
• SFTP Authentication: Passwords, Keys, and Combinations
  Key generation, authorized keys, service accounts, and automation-safe patterns.
• Beyond Copying: SFTP's File Operations and Their Quirks
  Rename semantics, permissions, timestamps, resume — and Windows-server wrinkles.
• The SFTP Server's Control Panel: Subsystem, Chroot, and Cipher Configuration
  The directives that matter, jailing users safely, and testing your lockdown.
• SFTP Performance: Why People Call It Slow and What Actually Helps
  Where the time really goes — and measurable tuning steps.
• Non-Interactive SFTP: Automation Without the 2 a.m. Password Prompt
  Batch mode, known-hosts management, and credential handling for scheduled jobs.

Explore More Topics

This series is part of the Sysax file transfer topic library, which covers the protocols, security practices, automation techniques, and operational skills behind reliable file transfer. The library pairs well with the practical tools we build: Sysax Multi Server, a secure FTP, FTPS, SFTP, and HTTPS server for Windows, and Sysax FTP Automation, which schedules and scripts secure transfers so the routine ones run themselves.