Ravi Sir's Cyber Security Cards › Revision Cards
FTP and SFTP
FTP and SFTP FTP (File Transfer Protocol) moves files, port 21. It is not encrypted . SFTP moves files over SSH (port 22). It is encrypted. In a packet capture tool like Wireshark , you can see an FTP password in plain text. Use SFTP or SCP instead of FTP on real systems. Installing an FTP server ju
Read card text
What this card says
What it is
FTP (File Transfer Protocol) moves files, port 21. It is not encrypted.
SFTP moves files over SSH (port 22). It is encrypted.
Why it matters for security
In a packet capture tool like Wireshark, you can see an FTP password in plain text.
Use SFTP or SCP instead of FTP on real systems.
Common mistake
Installing an FTP server just to upload files to EC2.
SSH is already running. In WinSCP or FileZilla, choose SFTP, port 22, and your key.
| Point | FTP | FTPS |
|---|---|---|
| Port | 21 (control) + 20 or random (data) | 21/990 + data ports |
| Encryption | None | TLS |
| Firewall friendliness | Poor (extra data ports) | Poor |
| Recommended? | No | Only if required |
Learn more in the lesson: 2.5 FTP and SFTP