Giving a designer, developer, or employee access to your website files should not mean sharing your main hosting login. When you know how to create an FTP account in cPanel, you can give each person a separate username, limit them to the right folder, and remove access when the job is done.

For small business websites, that control matters. A separate FTP account keeps routine file work organized and helps protect the rest of your hosting account from accidental changes. The setup takes only a few minutes in cPanel, even if you have never managed website files before.

What an FTP Account Does

FTP stands for File Transfer Protocol. An FTP account lets you connect to your hosting space with a file management app, then upload, download, rename, or edit files. It is commonly used for moving website files, updating themes, replacing images in bulk, or giving a web professional access to a specific project folder.

Your cPanel login is the master key for your hosting account. An FTP account is a controlled key you can create for a particular person or purpose. Instead of giving a contractor access to every setting in cPanel, you can give them access only to the folder that holds one website.

Most hosting accounts also include File Manager inside cPanel. File Manager is convenient for quick edits and one-off uploads. FTP is often more practical when you need to transfer many files, work with a developer, or use a desktop application that can resume interrupted uploads.

Before You Create an FTP Account in cPanel

Have the details of the person or application that will use the account ready. You will need a username, a strong password, and a decision about which directory the account can access.

The directory is the most important setting. If the account should manage your primary website, it may need access to the folder where that site is installed, often called public_html. If it is for an addon domain, staging site, or client project, assign the account to that specific site folder instead. This reduces the chance that someone changes files on the wrong website.

Also consider whether FTP is the right access method. For normal website file transfers, secure FTP over TLS, often shown as FTPS in an app, is usually the better choice. SFTP is different: it uses SSH access rather than a standard FTP account. If a developer specifically requests SFTP, check whether your hosting plan provides SSH access and follow the connection details supplied in cPanel or by support.

How to Create an FTP Account in cPanel

Start by signing in to your cPanel account. On the main cPanel screen, find the Files section and select FTP Accounts. The page shows existing accounts and includes a form for creating a new one.

Choose a clear login name

In the Log In field, enter a name that makes the account easy to recognize later. For example, use designer, backup, or store-manager rather than a random label. cPanel will usually add your domain name after the username, creating a login such as [email protected].

Clear names make account cleanup easier. Six months from now, you should be able to tell who has access without guessing.

Create a strong, unique password

Enter a password in the password fields, or use cPanel’s password generator. A long, randomly generated password is the safest option. Do not reuse the password from your cPanel login, email account, or another service.

If you are creating the account for someone else, share the password through a secure method. Avoid placing it in a public project board, unprotected document, or ordinary email thread. Once the person confirms that they can connect, you can store the credentials in a trusted password manager if your team uses one.

Set the right directory

The Directory field determines where this FTP user can go. This is where you set the account’s boundaries.

For a user who only needs to work on one website, point the directory to that website’s folder. For example, an account assigned to /public_html/client-site can work inside that folder but should not have access to files above it. A developer managing your main domain may need /public_html, but only choose that broader access when it is truly necessary.

Be careful not to leave the directory at a default location without checking it. An overly broad folder assignment can expose configuration files, other domains, or private content stored within the hosting account.

Choose a quota

The Quota setting controls how much data the FTP account can store or upload. For a contractor who only needs to update a few files, a limited quota is a sensible safeguard. For a trusted user handling large media uploads or site migrations, you may need a larger amount.

If you are unsure, start with a realistic limit and adjust it later. An unlimited quota is convenient, but it gives you less protection against an accidental upload of large backups, media archives, or duplicate files.

When the fields are complete, select Create FTP Account. cPanel should confirm that the account has been added.

Find the Connection Details

Creating the account is only the first step. The person using it needs the correct settings for their FTP application. Return to the FTP Accounts page and find the new account in the account list. Select Configure FTP Client beside that account.

cPanel will display the connection information, which generally includes the host name, username, port, and recommended security method. In many cases, the host is your domain name or the server host name supplied by your hosting provider. The standard FTP port is 21, while an explicit TLS connection also commonly uses port 21.

Use the exact host name shown in cPanel when possible. A domain name can sometimes work before its DNS has fully updated, but the server host name is often the more reliable choice for a new account or a recently moved site.

In your FTP client, enter the username and password you created, then select FTP with explicit TLS if the app offers that option. Your application may label it as FTPES or FTPS. Accept a valid security certificate prompt only after confirming it matches the connection information from your host.

Test Access Without Taking Risks

Before handing access to someone else, test the account yourself if possible. Connect with an FTP application and confirm that it opens in the directory you intended. Upload a small text file, verify that it appears in the expected folder, and then delete it.

This quick check can reveal a common problem: the account works, but it opens one folder too high or too low. A user placed in /public_html may see several site folders. A user placed in /public_html/example.com might not see the primary site’s files at all. Neither is automatically wrong. It depends on the job the person needs to do.

If a website is already live, be cautious with file replacements. Uploading an incorrect index.html, changing a configuration file, or overwriting a WordPress theme can affect visitors immediately. Create a backup before major work, especially when a developer is performing updates or a migration.

Manage FTP Accounts as Your Website Changes

FTP access should not be permanent by default. When a project ends, return to FTP Accounts in cPanel and use the available management options to change the password, alter the quota, update the directory, or delete the account.

Deleting an FTP account removes its login access, but it does not normally delete the website files stored in its assigned directory. Read the cPanel prompt carefully before confirming any removal option, particularly if it offers to delete files as well.

It is also worth reviewing active accounts every few months. Remove old logins for former contractors, retired projects, or team members who no longer need file access. This small housekeeping task can prevent a forgotten credential from becoming a security problem later.

Common FTP Account Problems

If the account will not connect, first confirm that the username includes the full format shown in cPanel. Then double-check the password, host name, port, and selected protocol. An incorrect security setting is a frequent cause of connection errors.

If the account connects but cannot upload or edit files, the issue may be the assigned directory or file permissions. The FTP user cannot work outside its designated folder. Files and folders may also have restrictive permissions, especially after a site migration or restore.

When you need help, have the exact error message ready along with the FTP client name and the connection method you selected. That gives a hosting support team the details needed to diagnose the issue faster. Visiba support can help you verify account settings without requiring you to share your main cPanel password.

A well-scoped FTP account gives you a practical balance of access and control. Create only the access a person needs, use a unique password, and remove it when the work is finished. That is a simple habit that keeps everyday website management safer and easier.