FTP and SFTP
Configure a password-authenticated FTP or SFTP backup destination.
FTP and SFTP send backups to a remote server account. Both use the same Easypanel fields, but their transport security differs.
| Protocol | Default port | Security |
|---|---|---|
| SFTP | 22 | Encrypts authentication and file transfer over SSH |
| FTP | 21 | Does not encrypt credentials or backup traffic |
Use SFTP whenever the destination supports it. Easypanel's current SFTP provider supports username and password authentication; it does not expose an SSH private-key field.
Prepare the remote account
Create a dedicated account and restrict it to the directory intended for backups. It needs permission to:
- list directories;
- create directories and upload files;
- read files for recovery;
- replace and delete files when retention or volume synchronization requires it.
Confirm that the Easypanel server can reach the remote host and port. FTP servers also need their data connections to pass through any provider or host firewall.
Configure SFTP
- Open Settings → Server → Storage Providers.
- Select Add Provider → SFTP.
- Enter:
- Name for the connection in Easypanel;
- Host as a hostname or IP address;
- Username and Password;
- Port, normally
22.
- Save the provider.
- Run a manual backup and verify the remote file.
Configure FTP
- Open Settings → Server → Storage Providers.
- Select Add Provider → FTP.
- Enter the provider name, host, username, password, and port. The normal FTP
port is
21. - Save the provider.
- Run a manual backup and verify the remote file.
Saving either provider asks rclone to list the authenticated account's remote
root. Easypanel returns Could not connect when that listing fails.
Listing does not prove that the account can upload, download, or delete. Verify all required operations with a manual backup and a recovery test.
Destination paths
Backup destination paths are relative to the remote root visible to the authenticated account:
production/orders-postgresConfigure the FTP or SFTP account's home or chroot directory on the destination server. Easypanel does not provide a separate base-directory field.
Use a different path for every backup configuration. Database retention can delete files under its path, and volume sync can remove remote files that are not present in the source volume.
Edit or remove the provider
Editing the host, port, username, or password revalidates the listing connection. Perform another manual backup afterward.
Removing the provider deletes its Easypanel configuration but does not delete remote files. Backup configurations that still reference its ID will stop working.
Troubleshooting
Could not connect
- Test DNS and network access from the Easypanel server.
- Confirm the protocol and port.
- Re-enter the username and password.
- Check whether the account is locked or restricted by source address.
- Verify list permission on the account's remote root.
- For FTP, check the server's passive-mode and firewall configuration.
Upload fails after the provider saved successfully
The account can list but cannot write. Grant directory creation and write permission in the destination path, then run the backup again.
Retention or volume sync fails
Grant delete and replace permission. Check whether filesystem ACLs, immutable flags, or server-side retention rules protect the affected files.
SFTP requires an SSH key
The current Easypanel form supports password authentication only. Create a restricted password-authenticated account or choose another provider type.
See Storage Providers for shared permission and backup-testing guidance.