Are SSH and SFTP the Same? | GoAnywhere MFT

SSH (Secure Shell) and SFTP (Secure File Transfer Protocol) are both network protocols designed for secure communication, but they serve different purposes. SSH provides secure remote access to servers, enabling tasks like command execution and server management, while SFTP, built as a subsystem of SSH, is specifically designed for secure file transfers. SFTP encrypts data during uploads and downloads, offering robust protection for file transfers over a network.

While SSH and SFTP are a classic pairing, consider security needs and functionality requirements when choosing between the two protocols. The video below explores a few key differences.

What is SSH?

[Secure Shell (SSH)](/content/products/goanywhere-mft/encryption/ssh "SSH Encryption"/index.html) is a transport layer that is used to secure logins and information moving between two endpoints. SSH uses a combination of asymmetric (public and private key) and symmetric cryptology to provide [strong encryption](/content/products/goanywhere-mft/encryption "Encryption"/index.html) and optimal performance. It allows for secure communication between an organization and remote servers.

What is SFTP?

[SFTP (SSH File Transfer Protocol)](/content/solutions/secure-ftp "Secure FTP Cornerstone"/index.html) is a secure FTP protocol that sends files over secure shell (SSH), providing a high level of protection for file transfers. SFTP implements AES, Triple DES, and other algorithms to encrypt data that flows between systems. It also offers several ways to authenticate a connection—with a user ID and password, SSH key, or a combination of a password and SSH key—for organizations that require stronger authentication.

More Terms to Know: [GoAnywhere Glossary](/content/glossary "GoAnywhere Glossary"/index.html)

SFTP Port Number 22

The SFTP default port is port 22, which is the port also used by SSH (Secure Shell).

In addition to using SFTP for encrypted, secure file sharing, the SFTP port can also be used for:

• Controlling access: If you need to secure interactions with an application or service requiring an SFTP file server, you’ll need access to the SFTP port.
• Accessing a remote server: If you need to securely upload, download, or manage files with a remote server that supports SFTP, you’ll also need port 22, or the SFTP port.
• Configuring firewalls: You’ll need to enable SFTP connections for your firewalls or other network security. Port 22 is the default port, however, depending on your security or network policies, a different port for SFTP may be configured.

As SFTP requires only a single port to be open for sending controls, and sending or receiving data files, communications can be easier. This single-port ease is particularly noticeable when dealing with strict, client-side firewalls.

SFTP Authentication

Since [SFTP](/content/blog/how-sftp-works "How SFTP Works"/index.html) is the protocol built on the SSH transport layer, SSH user authentication is used for SFTP communication exchanges.

How Does SFTP Authentication Work?

SFTP typically supports the following methods for user authentication:

• Password based authentication, where a username and password is supplied.
• Key based authentication where a username and an SSH key is supplied. Key based authentication has the benefit of being able to use the same key for multiple servers and eliminates password management.
• Two-factor authentication where a password and an SSH key are used. Two-factor authentication offers the highest level of security.

While SFTP doesn’t require two-factor authentication, you do have the choice to require both a password and SSH key for a more secure connection. Using SSH keys helps prevent imposters from connecting to the server.

Learn More: [SFTP Connectivity](/content/products/goanywhere-mft/connectivity/sftp "Explore Our SFTP Connectivity"/index.html)

Before using SSH keys for authentication, you must first generate both an SSH private key and a public key. The SSH public key is sent to your trading partner, and they must load it onto their server and associate it with your account. When you connect to their server, the server will verify the key for authentication. If everything matches, then the authentication will succeed.

How Are SSH and SFTP Similar?

SFTP cannot exist without SSH — SFTP uses SSH as the binding agent to [transfer files securely](/content/solutions/managed-file-transfer "Managed File Transfer Solution Cornerstone"/index.html). In other words, the SSH protocol is used in the file transfer mechanism SFTP. In fact, most SSH servers include SFTP capabilities. However, not all SFTP servers support SSH commands and actions.

How Do SSH and SFTP Differ?

Although they are both used to transfer information securely, unlike SFTP, SSH is able to exist on its own. Typical applications for SSH are remote command-line, login, and remote command execution. SFTP is the file transfer protocol that provides secure file access, file transfer, and file management over a reliable data stream.

Implement GoAnywhere’s SFTP Client Today

Ready to give our SFTP client a try? Download our free trial of [GoAnywhere Managed File Transfer](/content/products/goanywhere-mft "Explore GoAnywhere Managed File Transfer"/index.html). Our secure file transfer solution takes minutes to install, is quick to figure out, and is fully functional so you can determine if it's the right fit for your organization.