Skip to main content
.com domains from $2.99 — free WHOIS privacy on every name

Performance Glossary

FTP: Fast at Bulk, Wrong on the Wire

You have four thousand files to move and a panel file manager that times out, and you want the transfer that finishes without leaking your password.

The short answer

FTP is the long-standing protocol for moving files in bulk between your machine and a server, and it is still quick at that job because a client can hold several transfers open at once instead of loading a page per file.

The plain version sends your username, your password and your file contents across the network unencrypted. That was tolerable in 1995 and is indefensible now, which is why SFTP — a different protocol carried inside SSH — is the default worth using.

By the HostingFast team · Reviewed 12 August 2026

0

Terms, measured not asserted

100+

Entries wired together

Real

Client settings included

Free

Free to read, always

The workflow survives because it suits the work. Open a client, drag between two panes, let the queue drain. Bulk operations that make a browser-based file manager time out are unremarkable here, because the transfer is a background queue rather than a series of page loads.

FTPS wraps the original protocol in TLS, and it exists mainly to satisfy legacy systems. SFTP is the modern answer: same drag-and-drop experience, one port, and nothing readable on the wire.

Why bulk transfers beat a file manager

Every file moved through a browser file manager costs a request, a response and usually a page render. A transfer client opens a small number of parallel connections and streams files through them continuously, so four thousand small files take a queue rather than four thousand round trips.

Raising the concurrent connection count in your client helps up to a point and then hurts, because each connection has setup cost and shared hosting limits how many you may open. Two to four is the sensible band; ten is how you get temporarily blocked.

Small files are a latency problem

Throughput on a single large file is bounded by bandwidth. Throughput on thousands of tiny files is bounded by round trips, which is why a wp-content directory full of thumbnails transfers far more slowly than its total size suggests. Latency, not megabits, is the constraint.

Where you have shell access, archiving first is dramatically faster: one tar file up, one extract at the far end, no per-file negotiation at all. That is the single biggest speed-up available on a migration and it costs one command at each end.

What plaintext actually exposes

On plain FTP the credentials cross the network in clear text on the control channel, and the file contents cross it in clear text on the data channel. Anyone positioned between you and the server — the café wifi, a compromised router — reads both without effort or specialist tooling.

The practical consequence is not theoretical either: harvested hosting credentials are how a great many sites acquire injected code. If plain FTP is enabled anywhere in your workflow, it is the weakest link regardless of how strong the password is.

Verifying the transfer arrived intact

Compare file counts at both ends before you call it done — find . -type f | wc -l on each side is enough for most jobs. Clients silently skip files they cannot read and quietly fail on names with awkward characters, and a missing directory is far cheaper to notice now.

Check permissions afterwards too. A transfer that resets execute bits or ownership will produce a site that loads but cannot write uploads, which is a confusing failure to debug two days later.

Driving a hosting account through the cPanel dashboard

Transfers, measured in round trips

Where a task has a fast path and a slow one, the entry says which is which and what makes the difference — usually latency rather than bandwidth.

SFTP is available on every plan, and the developer-focused plans add SSH, Git and Composer so an archive-and-extract migration is one command at each end.

  • Bulk transfers explained by latency
  • Connection counts that do not get you blocked
  • The archive-first shortcut
  • Integrity checks at both ends

Why HostingFast

Standard on every plan

The bottleneck named correctly

Why thousands of small files are a round-trip problem and no amount of extra bandwidth fixes it.

Client settings that work

Concurrency figures that speed a queue up rather than tripping the connection limits on shared hosting.

The faster route given

Archive, transfer once, extract — the shortcut that removes per-file negotiation from a migration entirely.

Exposure described plainly

What travels in clear text on plain FTP, and the practical route from that to injected code.

Verification before celebration

File counts and permissions checked at both ends, because clients skip things quietly.

Pointed at the encrypted successor

The entry links to the protocol you should be using and the settings that get you connected.

Quick Start

From order to online

  1. 1

    Archive before you transfer

    Where you have shell access, tar the directory first. One large file moves far faster than ten thousand small ones on any connection.

  2. 2

    Keep concurrency in single figures

    Two to four parallel connections drains a queue efficiently. Pushing higher on shared hosting trips limits and costs you the transfer.

  3. 3

    Count files on both sides

    Compare totals before you delete anything at the source. Silent skips are the commonest way a migration loses a directory.

Built In

Loaded onto every plan

  • SSH, Git and Composer on the developer-focused plans
  • NVMe on every tier — the entry plan runs the same drives as the top one
  • Daily backups with a self-service restore you run yourself from the panel
  • Free migration by our own engineers, normally inside 24 hours
  • LiteSpeed compiled into the server, not a caching plugin bolted on afterwards
  • Staging you can clone, break and throw away before anything reaches live
  • cPanel, so every script and tutorial you already have still applies
  • Free SSL on every plan, reissued automatically well before it can expire
  • A human on support at any hour, including for the awkward questions
  • Zero setup fees, on any plan, ever

Frequently Asked

What people ask us most often

Is there any workflow where plain FTP is still acceptable?

Practically none. Use SFTP, which is on every plan we sell, encrypted end to end and supported by the same clients. FTPS exists for a legacy system that demands it. Plain FTP puts your credentials on every network segment between you and the server, and the password strength is irrelevant to that.

Why is my transfer so slow when the folder is only a few hundred megabytes?

Because the file count matters more than the byte count. Each small file costs its own negotiation, so a thumbnail-heavy uploads directory spends its time on round trips rather than on data. Archive it into one file first and the same transfer typically finishes in a fraction of the time.

What does a migration actually involve at your end?

You hand over the login for your current host and our engineers move files, databases, mailboxes and configuration across, normally inside 24 hours. You test the copy on our hardware before DNS changes, so the old site keeps answering visitors right up until the new one is ready to take over.

How quickly can a new site be answering requests?

Minutes rather than days. The account activates when payment clears, the domain — free for the first year on annual orders — connects immediately, and the one-click installer has WordPress or any of 240+ applications running shortly after. An existing site elsewhere gets migrated free, normally within a day.

Keep reading

Changing hosts? Run through our checklist first.

A straightforward sequence for a switch your visitors never feel: which files move first, how to shift email across without losing a single message, the right moment to repoint DNS, and the two mistakes behind almost all the downtime we get asked to rescue.

You'll get the checklist email, then occasional pointers on keeping a site running fast. Unsubscribe the moment you want out — the privacy policy covers the rest.

Move the files once, over an encrypted channel.

SFTP on every plan, SSH and Git on the developer tiers, and a free migration if you would rather we moved it.

View Domain Names plans