Select and Configure a WHM FTP Service Deliberately

WHM FTP Server Selection chooses the server’s managed FTP daemon or disables FTP. It is an administrator-level service choice, not a requirement to upload files using every available method. SSH/SFTP and browser File Manager have separate services and access rules.

Review the need and recovery plan

Identify existing FTP users, active transfers, chosen daemon, encrypted client support, passive/NAT settings and firewall management. Preserve configuration and a working recovery route. Changing daemons can interrupt users and alter supported features, including quota behavior.

Select the intended managed service

1. Use verified HTTPS WHM and authorized privileges.
2. Open Service Configuration > FTP Server Selection.
3. Review the offered Pure-FTPd, ProFTPD or Disabled options for the installed release. Choose the approved service, not a guessed performance default.
4. Save within the intended maintenance scope and inspect completion/status.
5. Review FTP Server Configuration for the selected daemon before enabling customer use.

Require an appropriate security configuration

Protect both command and data channels with supported modern TLS when offering FTPS; command-only protection does not encrypt transferred files. Validate the actual endpoint certificate and protocol negotiation rather than blindly copying an old documented cipher/default string. TLS 1.0/1.1 are deprecated.

Leave anonymous access/uploads and root-password login disabled unless a specific administrator-approved design requires otherwise. Do not grant broad shell access merely to replace a restricted FTP login. Use scoped account directories and the actual intended passive/firewall configuration.

Verify real access

Test an authorized encrypted login, listing and harmless transfer; check account scope, quotas and relevant logs. A saved selection or running daemon does not establish the data path or isolation. If FTP is unnecessary, plan its retirement without assuming that also removes SSH/SFTP or File Manager.

References: daemon selection, daemon-specific security controls and TLS deprecation.

Reviewed October 16, 2026. No daemon, TLS policy, account, firewall or live transfer was changed or tested.