Create an FTP account in cPanel

With an FTP account, you can use an FTP program to access files in your web hosting account. This allows you, for example, to upload, download, rename website files, or move them to other directories.

In cPanel, you can create additional FTP accounts and specifically define which directory a user is allowed to access. This way, you don't necessarily have to give a developer or another person access to your entire hosting account.

In this guide, we will show you step by step how to create an FTP account in CURIAWEB, set the correct access directory, and then use the account securely.

Important: The directory specified when creating an FTP account determines which area of the web space this account can access. Check this path particularly carefully.

What is an FTP account? #

FTP stands for File Transfer Protocol and is used to transfer files between your computer and a server.

For the connection, you normally use an FTP program like FileZilla or another application that supports the transfer method offered by the server.

After successful login, you can – depending on the permissions of the FTP account – access the files and directories authorized for this purpose.

When is an additional FTP account useful? #

A separate FTP account is particularly practical if a person should only have access to a specific area of the web space.

This could be, for example, a developer who works exclusively on a specific website.

Assuming the website is located at:

public_html/projekt/

Then an FTP account can be specifically restricted to this directory instead of allowing access to other websites or directories of the hosting account.

Safety: Only grant the access that is actually needed. A developer who is only supposed to work on a specific website typically does not need access to all files in your hosting account.

1. Log in to cPanel #

Log in to your CURIAWEB cPanel.

Then open:

Files → FTP Accounts

Here you can create additional FTP accounts and manage existing accounts.

2. Set username #

Enter the desired username in the FTP account addition section.

For example:

webmaster

or:

project

Depending on the cPanel configuration, the username is combined with the associated domain.

Therefore, the full FTP username can be displayed in a form like this, for example:

projekt@example.com

Important: For the subsequent FTP login, use the full username that cPanel displays for the account.

3. Select associated domain #

If your hosting account contains multiple domains, cPanel may offer a selection of the associated domain when creating the FTP account.

Select the appropriate domain.

Then check the resulting full username.

4. Create a secure password #

Create a strong and unique password for the FTP account.

Do not use easily guessable combinations like:

123456

password

ftp123

or the domain name.

If cPanel offers a password generator, you can use it.

Safety: Do not use the same password for an FTP account as you do for cPanel, WordPress, email, or other important logins.

5. Set the FTP account directory #

This step is particularly important.

cPanel displays a field for the creation of the FTP account for the Directory or specify the path.

This path determines the area the new FTP account can access.

Example: Access only to a specific website #

Assuming a website is located at:

public_html/projekt/

and the FTP user should only be able to edit this website.

Then the FTP account should be restricted to the corresponding website folder.

After logging in, the user sees this area as the starting point of their FTP access and cannot simply navigate to parent directories of the hosting account.

Example: Access to public_html #

If you as a directory:

public_html/

you specify, the FTP account gets access to the content within this area.

If there are several websites or sensitive subdirectories there, this access may already be more extensive than actually necessary.

Attention: Do not accept the directory path suggested by cPanel without checking it. Before creating the account, verify which area the user is actually supposed to access.

Why cPanel can automatically suggest a directory #

When entering the FTP username, cPanel can automatically append a matching directory path.

For example, if you have a user named:

project

created, an appropriately named directory can be suggested.

That does not automatically mean that this path is right for your intended use case.

Check and change it if necessary before creating the account.

The directory is the access limit #

An FTP account restricted to a specific directory can generally operate within this area and its subdirectories.

However, it cannot simply move beyond its defined access limit into higher-level areas.

This makes additional FTP accounts particularly suitable if you want to give external people access to only a specific website area.

Check the document root of the domain beforehand #

If multiple domains are set up in the hosting account, you should check beforehand which directory actually belongs to the desired domain.

Not every website needs to be directly under:

public_html

lie.

We explain how to navigate the file system under Use cPanel File Manager.

6. Set storage quota #

cPanel can, when creating an FTP account, Contingent or offer a quota for the user.

This can be used to limit how much storage space can be used via this FTP account.

If you set a limit, it should be large enough for the intended files.

Alternatively – if offered and appropriate – an unlimited quota can be selected.

Briefly explained: An unlimited FTP quota does not mean unlimited web space. The storage limits of your hosting package still apply.

7. Create FTP account #

Check again before creating:

• Username
• associated domain
• Directory
• storage quota

Then create the FTP account.

cPanel should then display the new account in the list of existing FTP accounts.

8. Check FTP account in the list #

Verify after creation that the account exists and the expected username is displayed.

Note or save the required connection data securely.

For an FTP connection, you typically need:

• Server or hostname
• FTP username
• Password
• Connection type or protocol
• if applicable, port

Which hostname to use? #

For the connection, you need the server or host name designated for your hosting account.

Use the connection data shown or provided to you for your CURIAWEB hosting account.

Do not rate the server name and do not simply copy connection data from a third-party guide.

Don't confuse FTP, FTPS, and SFTP #

The terms FTP, FTPS, and SFTP are often confused with one another, but they do not refer to the same thing.

FTP is the classic File Transfer Protocol.

FTPS is FTP with TLS encryption.

SFTP is by contrast a file transfer protocol over SSH and technically not the same as FTP.

Important: Select the protocol actually intended for your access in your FTP program. An FTP account created in cPanel is not automatically an SSH/SFTP user.

Avoid unencrypted FTP #

If an encrypted connection is offered, you should prefer it over an unencrypted FTP connection.

This prevents login credentials and transmitted data from being transmitted unencrypted across the network unnecessarily.

9. Connect using an FTP program #

After creation, you can set up the account in FileZilla, for example.

There you enter the connection data valid for your hosting account.

A complete step-by-step guide follows below Accessing web hosting with FileZilla.

10. Check access after the first login #

After a successful connection, you should check whether the FTP account can actually only access the intended area.

For example, if the account is for:

public_html/projekt/

was created, the user should not be able to access other, higher-level areas of the hosting account.

Practical Tip: Test an account for an external user yourself before handing over the access credentials. This allows you to check whether the access limit has been set correctly.

FTP account for a web designer or developer #

If a web designer or developer is only supposed to work on a specific website, a separate FTP account is often more sensible than passing on broader hosting access.

Restrict the account to the website folder actually required.

Once the work is completed, you can delete the FTP account again.

Do not share cPanel access data #

If an external person only needs to edit files on a website, you shouldn't unnecessarily give them your personal cPanel login credentials.

cPanel provides access to numerous other hosting features that are not needed for simple file modifications.

A separate FTP account limits access much more specifically.

FTP account for a single domain #

For multiple websites within a hosting account, you can create a separate FTP account for each website.

For example:

Website A → own directory → FTP account A
Website B → own directory → FTP account B
Website C → own directory → FTP account C

This allows different people to work on various websites without necessarily getting access to the remaining projects.

Use FTP account for uploads #

After a successful connection, you can transfer files from the local computer to the server.

Always check the destination path in the process.

A correctly uploaded file in the wrong directory may not be used by the website or could be publicly accessible in an unexpected location.

Use FTP account for downloads #

FTP is also suitable for downloading larger amounts of data.

For large websites, this can be more convenient than manually downloading many individual files via the browser.

Alternatively, the cPanel file manager is available for smaller tasks.

FTP or cPanel File Manager? #

For individual files or small changes, the cPanel File Manager often sufficient.

FTP is especially convenient if you want to transfer regular or large amounts of files between your computer and the server.

FTP is not automatically a complete backup #

Downloading all visible website files via FTP does not automatically mean you have a complete backup of the website.

Content management systems like WordPress also use a database.

This is not automatically backed up simply by downloading the website files.

Hidden files during FTP access #

Depending on the FTP program used, hidden files such as:

.htaccess

also be displayed.

Handle such files with special care.

How .htaccess is processed and handled securely, we explain under .htaccess explained and safely edited.

File permissions via FTP #

Many FTP programs can also display or modify file permissions.

Do not change these on suspicion.

In particular, you should not blanket-apply to files or directories:

777

Sit.

We explain how it works at How to correctly set file permissions 644 and 755 in cPanel.

Change FTP password #

If the password of an FTP account needs to be changed, open:

Files → FTP Accounts

Find the relevant account and use the password change function offered there.

Assign a new strong password and then update the saved credentials in your FTP program.

Important: Following a password change, a connection using the old password no longer works. Therefore, update saved connections on all devices or for all authorized persons.

Change FTP quota #

When an FTP user reaches their specified storage quota, further uploads may fail.

In this case, check the account at:

Files → FTP Accounts

and adjust the quota as needed.

Keep in mind the storage limit of the entire hosting package.

Delete FTP account #

If an account is no longer needed, you should remove it.

Open:

Files → FTP Accounts

Find the account in question and select the delete function.

Watch out for the files when deleting #

Depending on the offered cPanel option, when deleting an FTP account, there may also be the possibility to remove the associated files or the home directory of the account.

Therefore, read the displayed option carefully.

Attention: Do not accidentally delete website files along with an FTP account. If the account accesses a productive website folder, there may be important data there.

Remove FTP account after project completion #

If you have given an external service provider temporary access, you should delete the account after the work is completed or at least change the password if access is no longer needed.

Unused access accounts should not be kept active unnecessarily.

Do not share access credentials #

If several external people require access, separate FTP accounts make sense.

This allows you to remove a single access without having to change the access credentials of all other users.

Securely store FTP access credentials #

Do not store FTP passwords unencrypted in text files, notes, or publicly accessible website directories.

A filename like:

ftp-password.txt

within

public_html

is not a suitable storage location for access credentials.

Use a suitable password manager or a comparably secure solution instead.

Do not distribute FTP access credentials via an insecure channel #

If you need to share access credentials with a service provider, use a secure transmission method.

Share access data only with people who actually need it.

Connection not working #

If the FTP connection does not work after creating the account, check first:

• the full username
• the password
• the server or host name
• the selected protocol
• the used port
• whether the FTP account still exists

We cover a detailed diagnosis under FTP connection not working: Causes and solutions.

Login works, but wrong files are displayed #

If the connection is successful but you do not see the expected website files, the directory path stored for the FTP account is often the first thing to check.

Check under:

Files → FTP Accounts

to which area the account is restricted.

Also check whether the domain in question actually uses the same document root.

Upload is not working #

If the login works, but files cannot be uploaded, there are several possible causes.

Check among other things:

• the storage quota of the FTP account
• the available storage of the hosting account
• the permissions of the destination directory
• the specific error message of the FTP program

Do not set the file permissions blindly to 777, to bypass a failed upload.

Connection drops during large transfers #

When large transfers fail, you should check the error messages or the transfer log of your FTP program.

A broken connection can result in only some of the files being transferred.

Therefore, after an abortion, check which files have actually arrived completely on the server.

Incomplete website after FTP upload #

When you transfer an entire website via FTP, it is not enough to just check if some files are visible.

Check if all required directories and files have been completely transferred.

For database-based websites, the database must also be correctly present and configured.

Do not overwrite existing files uncontrolled #

FTP programs may report during upload that a file already exists on the server.

Before you overwrite them, you should check:

• whether it is actually the right file
• whether the local version is more current or correct
• whether a backup of the existing server file exists

Practical Tip: When making changes to a live website, you should download or otherwise back up important existing files before overwriting them.

Recommended procedure for creating an FTP account #

1. Log in to cPanel.
2. Open Files → FTP Accounts.
3. Assign a unique username.
4. Select the appropriate domain if applicable.
5. Generate a strong, unique password.
6. Check the access directory particularly carefully.
7. Set a storage quota if necessary.
8. Create the FTP account.
9. Record the required connection data securely.
10. Test the account yourself before passing it on to another person.

Recommended workflow for external service providers #

1. Determine the directory of the website in question.
2. Create a separate FTP account just for this area.
3. Use a strong temporary password.
4. Test the access limit.
5. Transmit the access credentials securely.
6. Delete the account again after completion of the work if it is no longer needed.

Basic rule: Give an FTP user access only to the area they actually need. The directory specified during creation is therefore one of the most important settings of the entire FTP account.

When should you contact support? #

If a newly created FTP account cannot connect despite correct access data, you should note the exact error message of your FTP program.

For an analysis, the following information is particularly helpful:

• affected domain or hosting account
• used FTP program
• used protocol
• Server or host name
• full FTP username
• Port
• exact error message
• whether the login fails or first the file upload or download

Transmit in the process not the FTP password. For a normal error analysis, the password itself is not required.

Summary #

You can create an additional FTP account in the CURIAWEB cPanel under Files → FTP Accounts.

Assign a unique username and a strong password. The stored one is particularly important. Directory, because it determines which area of the web space the account can access.

For external developers or web designers, you should create a separate FTP account if possible, restricted only to the website or directory actually needed. You do not need to share your personal cPanel credentials for this.

Use an encrypted transmission method if possible, and note that FTP, FTPS, and SFTP are different procedures.

If temporary FTP access is no longer needed after a project is completed, you should remove the account again. When deleting it, however, carefully check that the associated website files are not accidentally deleted.