File Transfer Protocols Explained: FTP, SFTP, HTTPS, and More
FTP, SFTP, SCP, HTTPS, rsync — there are many protocols for moving files. Here's when to use each and which are still relevant in 2026.
File transfer protocols are the rules that govern how files move across networks. Each protocol was designed for different conditions, security requirements, and use cases. Here's the landscape in 2026.
FTP (File Transfer Protocol) — Mostly Obsolete
FTP dates from 1971. It transmits credentials and data in plaintext — completely visible to anyone on the network. In 2026, there is essentially no reason to use plain FTP. It persists only in legacy systems and cheap shared hosting. Avoid it.
FTPS — FTP with TLS — Use with Caution
FTPS adds TLS encryption to FTP. It's more secure than plain FTP but complex to configure correctly (active vs passive mode, firewall rules, dual ports). Unless you have an existing FTPS infrastructure, SFTP is a better choice for new deployments.
SFTP (SSH File Transfer Protocol) — The Right Choice for Server Transfers
Despite the similar name, SFTP is not FTP over SSL. It's a completely separate subsystem of the SSH protocol. SFTP provides strong authentication (SSH key pairs), encryption, and integrity verification. It works over a single port (22), making firewall configuration simple. For server-to-server transfers, SFTP is the standard choice.
SCP (Secure Copy Protocol) — Simple but Limited
SCP runs over SSH and is optimised for simple file copies. It's faster than SFTP for single-file transfers but lacks the ability to resume interrupted transfers, list directories efficiently, or perform partial transfers. For bulk file operations, use SFTP or rsync.
rsync — The Power Tool
rsync transfers only the changed portions of files (delta transfer), making it extremely efficient for incremental backups and synchronisation. Over SSH (rsync -avz -e ssh), it's both encrypted and resumable. Ideal for large directory synchronisation.
HTTPS — For Consumer and Developer File Sharing
For sharing files with non-technical users, nothing beats a plain HTTPS download link. It works in every browser, on every device, through every firewall. Services like TiniDrop wrap simple file hosting in HTTPS to give you the widest possible compatibility with zero setup for recipients.
Ready to share your files?
Drop any file and get a shareable link in seconds. No account needed.
Try TiniDrop free →