SFTP vs FTPS: How to choose the right protocol?

What is FTPS and how to use it?

FTPS meaning: File Transfer Protocol Secure. At its simplest, FTPS is an extension of FTP. They both work in the same way, with the same protocol – but FTP alone offers no encryption when transferring files between client and server.

The FTPS protocol adds on encryption through a third party certificate, like an SSL (Secure Sockets Layer) certificate – but preferably through Transport Layer Security (TLS). Unlike SFTP, which uses a single encrypted communication channel, FTPS uses two: one connection for commands and another for data transfer. And that brings us to the key difference between SFTP and FTPS.

There are actually two kinds of FTPS: implicit FTPS and explicit FTPS. Implicit FTPS encrypts both the command and data connections, at all times. This is the most secure type, as commands cannot be spoofed and data cannot be intercepted. The problem is that the constant encryption of large files uses a lot of bandwidth, which can slow the transfer. In explicit FTPS, only commands and user authentication are always secure – the data channel can be either encrypted or unencrypted.

This flexibility is useful for non-confidential file transfers, where speed is a necessity and data security isn’t always essential. Access to the server still remains secure and commands cannot be intercepted – but the data is vulnerable to interception. To use FTPS, an FTP client that supports FTP over TLS is recommended. A command-line client can also be used.

Advantages of using FTPS

Explicit FTPS speed is faster than SFTP, because large files of non-sensitive data can be unencrypted. This may be useful for quickly transferring large files that are already publicly available.

There are some disadvantages to FTPS, too. FTPS is more complex to implement, because it requires more firewall configuration. This can make setup more difficult, cancelling out the speed advantage it holds over SFTP. The additional configuration requirements can also expose vulnerabilities in the firewall while the connection is open.

What to choose: SFTP or FTPS?

So, in the face-off of SFTP vs FTPS, there can only be one winner – and SFTP takes the title.

While it does have a slight speed disadvantage over FTPS, the fully encrypted security features and simplicity mean SFTP is the best protocol for secure file transfer. While FTPS is still highly secure (especially implicit FTPS), it has a more complicated setup which introduces several disadvantages over SFTP. For legacy systems, however, it’s still a strong, secure method of file transfer.

How to choose SFTP/FTPS client

Choosing an SFTP/FTPS client can feel like a tricky decision. There are so many paid and free options available, all with similar features and abilities. It can be hard to tell them apart.

The best SFTP/FTPS clients offer a simple, flexible user interface, dual panel views and flexible FTP options beyond FTPS or SFTP. it should also have options for advanced users, like a command terminal and integration with cloud computing platforms.

Commander One does all this – and so much more.