Manage DirectAdmin FTP Accounts Without Anonymous Exposure

DirectAdmin FTP Management creates and manages file-transfer accounts within the intended user. It is separate from panel-user administration and from SSH/SFTP access. Use the actual account and encrypted service settings supplied by the provider.

Create and verify a restricted account

1. Enter verified HTTPS DirectAdmin and the correct user context, then Account Manager > FTP Management. Older skins used Your Accounts.
2. Choose Create FTP Account, select a unique login and protected password, and review the available access-level/directory choices.
3. Choose only the intended directory tree. A subdomain-specific account must match the real subdomain root, not a guessed folder.
4. Create the account and inspect its saved identity and scope.
5. Verify authorized encrypted access using harmless data and confirm unrelated directories remain outside the intended access.

Modify, suspend or remove access

Select the exact FTP account to update its password or supported access settings. Review the installed Suspend/Unsuspend controls if available; suspension is not deletion. Do not assume changing a credential terminates every established session.

For removal, preserve required data, select only the intended account and inspect the Delete confirmation. Check version-specific directory/file behavior rather than treating account deletion as a backup or assuming shared content cannot be affected. Verify remaining website and account access afterward.

Do not enable anonymous access as a routine step

Anonymous FTP, particularly anonymous upload, exposes a different public access surface. The old walkthrough presented enabling it alongside ordinary account creation without explaining the risk. Leave it disabled unless an administrator has approved a specific isolated use, resource limits and abuse controls. Do not publish a writeable website tree anonymously.

Use the provider-approved FTPS hostname/certificate or an explicitly authorized SFTP identity. Plain FTP and root credentials are not necessary defaults for a restricted website task.

Reference: DirectAdmin account scope and anonymous-upload warning.

Reviewed October 16, 2026. No FTP account, anonymous access, directory, credential or customer session was changed or tested.