Home › Topics › SFTP In Depth

SFTP In Depth

SFTP has become the default answer to “how should we transfer files securely?” There is good reason: one port, strong encryption, and authentication that can be fully key-based. But SFTP is also widely misunderstood, starting with its name. It is not FTP with security added. It is a different protocol that rides inside SSH.

This series explains SFTP properly. It covers the architecture, the authentication options and their tradeoffs, and the server-side lockdown knobs. It explains why transfers sometimes feel slow and what actually helps, and how to automate SFTP jobs without leaving passwords lying around. Windows admins are first-class citizens throughout — including where POSIX-shaped behavior meets Windows servers.

Articles in This Series

How SFTP Actually Works: The SSH Subsystem Architecture
SSH layers and channels, and why “FTP over SSH” is the wrong mental model.
SFTP vs FTPS: Ending the Confusion for Good
The naming mess and its practical consequences — ports, keys vs certificates, firewalls.
SFTP Authentication: Passwords, Keys, and Combinations
Key generation, authorized keys, service accounts, and automation-safe patterns.
Beyond Copying: SFTP's File Operations and Their Quirks
Rename semantics, permissions, timestamps, resume — and Windows-server wrinkles.
The SFTP Server's Control Panel: Subsystem, Chroot, and Cipher Configuration
The directives that matter, jailing users safely, and testing your lockdown.
SFTP Performance: Why People Call It Slow and What Actually Helps
Where the time really goes — and measurable tuning steps.
Non-Interactive SFTP: Automation Without the 2 a.m. Password Prompt
Batch mode, known-hosts management, and credential handling for scheduled jobs.
How to Set Up an SFTP Server on Windows - Step by Step
This article is the hands-on setup guide. It covers building an SFTP server on Windows with the included OpenSSH server or a dedicated product, restricting accounts to file transfer in their own folders, publishing the host key fingerprint, and connecting and testing from outside.
What Is SFTP? Meaning, Port, and How It Differs from FTP
This article is the starting point of the series. It explains what SFTP is and what the name means, how it runs inside SSH on port 22, how each side proves its identity, how it differs from FTP, FTPS, and SCP, what it is used for, and what it does not protect.
SFTP Server - What It Is, How It Works, How to Choose One
This article explains the server side: what an SFTP server is, the five parts every one has, how it compares with an FTP server, the ways to run one on Windows, what to look for, what it costs to run, and a requirements sheet to fill in before choosing.
SSH Server for Windows: What It Does and How to Set One Up
What an SSH server on Windows gives you beyond SFTP - shell, port forwarding, keys - what Windows includes, and when a dedicated server pays.

Frequently Asked Questions

What is an SFTP server?

A service that accepts SSH connections on port 22 and exposes a file system to authenticated users through the SFTP subsystem. It verifies itself with a host key, authenticates users by password or SSH key, encrypts everything on one connection, and confines each user to their permitted directories. OpenSSH provides one on Linux and modern Windows; commercial Windows servers add web administration, FTPS and HTTPS alongside it.

How do I set up SFTP with an SSH key instead of a password?

Generate a key pair on the client, keep the private key there, and install the public key in the user's authorized keys on the server. The client then proves it holds the private key and no password crosses the network at all. The authentication article in this series covers key generation, installation, requiring key plus password, and the service-account patterns that keep unattended jobs safe.

Can I run an SFTP server on Windows?

Yes. Windows Server 2019 and later, and Windows 10 and 11, include OpenSSH with an SFTP subsystem as an optional feature. Commercial products add a management console, user isolation without editing configuration files, and the FTPS and HTTPS endpoints partners often also need. The server-configuration article covers both routes.

Explore More Topics

This series is part of the Sysax file transfer topic library. The library covers the protocols, security practices, automation techniques, and operational skills behind reliable file transfer. The library pairs well with the practical tools we build. Sysax Multi Server is a secure FTP, FTPS, SFTP, and HTTPS server for Windows. Sysax FTP Automation schedules and scripts secure transfers so the routine ones run themselves.