Editing a theme file by hand, pulling an error log or running WP-CLI all start in the same place: SFTP or SSH access to the WordPress site. On InstaWP’s managed WordPress hosting, every site has it, down to a $2 sandbox, and one toggle in the site’s SFTP/SSH panel turns on both. You get a single set of connection details (host, username, password and port) that works in FileZilla and in a terminal.
This guide covers turning on WordPress SFTP access, connecting with FileZilla or over SSH, switching to key-based login, using the browser Web Terminal when you have no SSH client, and fixing a connection that refuses to open.
- One toggle, one set of credentials. Enable SSH/SFTP once per site and the same host, username, password and port work for file transfer and the command line.
- It is on every plan from the $2 Sandbox up, so you can work over SSH while a site is still being built and keep the same setup when it goes live.
- WordPress lives in public_html. SFTP lands you in the home directory; open public_html to reach wp-content and wp-config.php.
- Regenerating the password kills the old one at once. Update saved FileZilla profiles and deploy scripts in the same sitting.
- Network blocks port 22? The Web Terminal in the dashboard still gives you a shell with WP-CLI, straight from the browser.
- Use an SSH key for anything automated, so no password is stored in a script.
Table of Contents
What Is the Difference Between SFTP and SSH?
SSH (Secure Shell) is an encrypted connection to a server’s command line. SFTP (SSH File Transfer Protocol) runs over that same SSH connection to move files securely. On InstaWP the two share one switch and one set of credentials, so you use SFTP to upload or download files and SSH to run commands such as WP-CLI.
Plain FTP sends passwords and files unencrypted, which is why InstaWP offers SFTP instead.
Which InstaWP Plans Include SFTP and SSH Access?
Every paid InstaWP plan includes SFTP and SSH: Sandbox ($2 a month), Starter, Plus, Pro, Turbo and Elite. Developer access is never held back for higher tiers. Accounts still on a legacy plan from before the v3 platform release get SFTP and SSH on the Personal Yearly plan and above.
That makes a $2 sandbox a cheap place to work over SSH while a site is being built. When it is ready, change the plan to production and the same SFTP/SSH setup keeps working on the same site. See which InstaWP site plan to pick for what each tier adds.
How Do You Enable SFTP and SSH on an InstaWP Site?
Enable SFTP and SSH from the site’s SFTP/SSH panel. It takes a few seconds, and you only do it once per site.
Step 1: Open the SFTP/SSH panel. In the Sites list, click the three-dot More Actions button on the site and choose SFTP/SSH.
Step 2: Switch on Enable SSH/SFTP. The Connection Details stay hidden until the toggle is on. Once it is, the panel shows the Host Name, User Name, Password and Port, each with a copy button, plus an SSH Command button that copies a ready-made connection command.
Step 3: Copy the details. Copy each value straight from the panel into your SFTP client or terminal rather than retyping it. The full reference is in the docs under SSH key pair and SFTP access.
How Do You Connect to WordPress With an SFTP Client?
To connect with an SFTP client, create a new connection that uses the SFTP protocol and paste in the host, port, username and password from the InstaWP panel. Any SFTP client works; the steps below use FileZilla.
- Open FileZilla and go to File, then Site Manager, then New site.
- Set Protocol to SFTP – SSH File Transfer Protocol.
- Paste the Host and Port from the InstaWP panel.
- Set Logon Type to Normal, then paste the User and Password.
- Click Connect and accept the server’s host key the first time.
You land in the site’s home directory. WordPress itself lives in the web root, public_html, so open that folder to reach wp-content, wp-config.php and the rest of the install. Cyberduck and WinSCP take the same four values.
functions.php or wp-config.php takes the site down immediately. Download a copy of any file before you change it, or take a backup first so you can restore in one click.How Do You Connect to an InstaWP Site Over SSH?
To connect over SSH, click SSH Command in the SFTP/SSH panel to copy the ready-made command, paste it into your terminal and enter the password when asked. On macOS and Linux the built-in Terminal works; on Windows use Windows Terminal, PowerShell or PuTTY.
# paste the SSH Command from the InstaWP panel, which looks like this $ ssh your-username@your-host -p port # then move to the web root and check WP-CLI sees the install $ cd public_html $ wp core version
Once you are in, you can run any WP-CLI command against the site: update plugins in bulk, run a search-replace after a domain change, reset an admin password or export the database. Our WP-CLI guide covers the commands worth knowing. Tools that run over SSH, such as scp and rsync, work as soon as access is enabled.
How Do You Use an SSH Key Instead of a Password?
Generate a key pair on your computer, add the public key to InstaWP from the SSH/SFTP Access dialog, then connect with the private key. Key login is the better choice for deploy scripts and anything automated, because no password is stored or typed.
Generate a key pair on Windows
Download PuTTY, which includes the PuTTYgen key generator. Open PuTTYgen, click Generate and move your mouse over the blank area until the key is created. Click Save public key and Save private key and keep both files somewhere safe.
Generate a key pair on macOS or Linux
macOS and Linux ship with OpenSSH, so open a terminal and run:
$ ssh-keygen # accept the default location (~/.ssh/) and set a passphrase if you want one $ cat ~/.ssh/id_rsa.pub # the public key to paste into InstaWP
Add the public key to InstaWP
- Open the site’s SFTP/SSH panel and click Add SSH/SFTP User in the SSH Keys section.
- Choose SSH Key as the authentication method.
- Paste your public key and click Add SSH/SFTP User.
You can also manage keys for your whole account under Account, then SSH Key Pair, as described in the docs on adding and using SSH keys. In FileZilla, set Logon Type to Key file and select your private key. FileZilla offers to convert an OpenSSH key to its .ppk format the first time.
Can You Run Commands Without an SSH Client?
Yes. The InstaWP Web Terminal opens a full SSH shell for the site inside the dashboard, so you can run WP-CLI and edit files from a browser with no SSH client, key or connection settings. It is available on Sandbox and above, and it needs SSH enabled for the site.
Open the site, expand Developer Tools in the site menu and click Web Terminal. The prompt starts in the site’s web root, where commands like wp plugin list work straight away (see this WP-CLI command list for more). It also helps on networks that block outbound SSH on port 22, because the session runs over the browser. The Web Terminal docs list what it can and cannot do.
Prefer to work on files in your own editor? Local Mount mounts the site’s files on your computer, and Git deployment pushes changes from a repository. Both sit alongside SFTP/SSH in the developer tools.
For jobs like plugin updates, content edits or database checks, an AI client such as Claude can use the site’s WordPress MCP server with a scoped, revocable token, instead of an SSH password you would have to share.
How Do You Reset the SFTP/SSH Password?
Click the refresh icon next to Password in the SFTP/SSH panel (or open SSH/SFTP Access and choose Password), then click Regenerate Password. InstaWP shows the new password once, with a copy button, so copy it before you close the dialog.
A new password replaces the old one immediately. Saved SFTP profiles, deploy steps or a migration over SSH still using the old password stop working until you update them. Regenerate after sharing access with a contractor, or whenever you think a credential has leaked (our WordPress security guide covers the rest of the checklist).
Why Is My SFTP or SSH Connection Failing?
Most failed connections come from one of four things: access is not enabled, the password changed, the client is using the wrong protocol or port, or the network blocks SSH.
Is SFTP and SSH Access Worth Enabling?
Enable SSH/SFTP once from the site’s SFTP/SSH panel, then use the same host, username, password and port in FileZilla or a terminal. Switch to an SSH key for scripts, regenerate the password after sharing it, and use the Web Terminal when you cannot use an SSH client. It is included on every paid InstaWP plan, including the $2 Sandbox.
SFTP and SSH on InstaWP: Frequently Asked Questions
Does InstaWP support SFTP and SSH?
Yes. Every paid InstaWP plan, including the $2 Sandbox, includes SFTP and SSH. Turn it on with the Enable SSH/SFTP toggle in the site’s SFTP/SSH panel.
Are SFTP and SSH credentials the same on InstaWP?
Yes. One toggle enables both, and the same host, username, password and port work for SFTP file transfer and SSH command-line access.
Does InstaWP support plain FTP?
InstaWP provides SFTP, which encrypts both the login and the files. Choose SFTP rather than FTP as the protocol in your client.
Where are my WordPress files over SFTP?
In the public_html folder, the site’s web root. It holds wp-content, wp-config.php and the rest of the WordPress install.
Can I use an SSH key instead of a password?
Yes. In the SSH/SFTP Access dialog choose SSH Key, paste your public key and click Add SSH/SFTP User. Then connect with the matching private key.
Can I run WP-CLI on InstaWP?
Yes. Connect over SSH and run wp commands from the public_html folder, or use the Web Terminal in the dashboard, which opens a shell in the web root with no SSH client needed.
What happens when I regenerate the SFTP password?
The new password replaces the old one immediately. Anything still using the old password, such as a saved FileZilla profile or a deploy script, stops working until you update it.
