EasypanelDocs

FTP and SFTP

Configure a password-authenticated FTP or SFTP backup destination.

FTP and SFTP send backups to a remote server account. Both use the same Easypanel fields, but their transport security differs.

ProtocolDefault portSecurity
SFTP22Encrypts authentication and file transfer over SSH
FTP21Does not encrypt credentials or backup traffic

Use SFTP whenever the destination supports it. Easypanel's current SFTP provider supports username and password authentication; it does not expose an SSH private-key field.

Prepare the remote account

Create a dedicated account and restrict it to the directory intended for backups. It needs permission to:

  • list directories;
  • create directories and upload files;
  • read files for recovery;
  • replace and delete files when retention or volume synchronization requires it.

Confirm that the Easypanel server can reach the remote host and port. FTP servers also need their data connections to pass through any provider or host firewall.

Configure SFTP

  1. Open Settings → Server → Storage Providers.
  2. Select Add Provider → SFTP.
  3. Enter:
    • Name for the connection in Easypanel;
    • Host as a hostname or IP address;
    • Username and Password;
    • Port, normally 22.
  4. Save the provider.
  5. Run a manual backup and verify the remote file.

Configure FTP

  1. Open Settings → Server → Storage Providers.
  2. Select Add Provider → FTP.
  3. Enter the provider name, host, username, password, and port. The normal FTP port is 21.
  4. Save the provider.
  5. Run a manual backup and verify the remote file.

Saving either provider asks rclone to list the authenticated account's remote root. Easypanel returns Could not connect when that listing fails.

Listing does not prove that the account can upload, download, or delete. Verify all required operations with a manual backup and a recovery test.

Destination paths

Backup destination paths are relative to the remote root visible to the authenticated account:

production/orders-postgres

Configure the FTP or SFTP account's home or chroot directory on the destination server. Easypanel does not provide a separate base-directory field.

Use a different path for every backup configuration. Database retention can delete files under its path, and volume sync can remove remote files that are not present in the source volume.

Edit or remove the provider

Editing the host, port, username, or password revalidates the listing connection. Perform another manual backup afterward.

Removing the provider deletes its Easypanel configuration but does not delete remote files. Backup configurations that still reference its ID will stop working.

Troubleshooting

Could not connect

  • Test DNS and network access from the Easypanel server.
  • Confirm the protocol and port.
  • Re-enter the username and password.
  • Check whether the account is locked or restricted by source address.
  • Verify list permission on the account's remote root.
  • For FTP, check the server's passive-mode and firewall configuration.

Upload fails after the provider saved successfully

The account can list but cannot write. Grant directory creation and write permission in the destination path, then run the backup again.

Retention or volume sync fails

Grant delete and replace permission. Check whether filesystem ACLs, immutable flags, or server-side retention rules protect the affected files.

SFTP requires an SSH key

The current Easypanel form supports password authentication only. Create a restricted password-authenticated account or choose another provider type.

See Storage Providers for shared permission and backup-testing guidance.