Insecure FTP connection - error message

[AmandaCG]

I have been using FZ for over a year with no issues at all. Then overnight i am getting this error. I am so out of my depth I just dont understand what this is (but it doesnt sound good) and I dont know how to fix it. I have tried going through other posts but really dont understand the answers, Please could someone explain incredibly simply what I should do to fix the issue, or should I just look for different software. I simply want to put files up on my website in order for a client to see them, a colleague also does this, then download files. Obviously it all needs to safe and secure. I use a Mac, latest OS. FZ 3.36.0.

[boco]

The FTP server you're connecting to does not support any means of encrypting traffic. Everything you will transfer to or from the server will be in plain text, and everyone or everything listening on the wire can read and modify it. This includes all login data, including passwords.

Well, while the warning message is new in 3.36, you have been at risk since you first connected to that server. Now, FileZilla simply warns about it, when previously it didn't, yet.


If you are willing to take the risk (like you did until now), just press OK. The best solution would be to ask the hosting provider about FTP over TLS support for their servers. With FTP over TLS support, the risk would be minimized and the warning go away.

[AmandaCG]

Many thanks - very clear.

I will continue as is in the short term, but speak to server - then I might have to come back for more answers!.

[AmandaCG]

My server has enabled SSH and given me new log in details .

In Site Manger I changed the protocol to 'SFTP - SSH File Transfer Protocol. Inputted host name (my site) and a port number that my server gave me.
Under Logon Type I entered 'Ask for password'. Put in my user name but it will not allow me to enter the password. The cursor wont enable in any way over that box. I clicked on 'Connect' and an error message came up saying was I sure this was the site I wanted to go through to, I clicked yes and I have got on. However I was wanting to know if this sound OK to you. I am a little worried that I have not been able to put in my password where it really should be.

[boco]

Well, you have chosen "Ask for password". If you want FileZilla to ask for the password at connection time, it's only logical that you can't pre-enter it. If you want to store the password in Site Manager, use the Logon type "Normal". SFTP is secure and the warning won't occur.




If only more users would demand secure connections from their hosters... Plain FTP is from the previous century, and needs to be put to rest. Unfortunately, there are a few special cases still requiring it, as the embedded servers can't be updated.

[AmandaCG]

Thanks for being patient. I know its difficult dealing with people like me who just dont understand. But thanks again.

[boco]

That's what we are here for. People who don't understand at first are all OK.



However, people who don't want to understand are far worse. Unfortunately, we had a few of them here, too.

[cruona]

I had the same problem. My server is Hostway.com . They gave me a different port number to use, and the message went away.