Encrypted connections
SFTP (SSH) and FTPS (TLS) encrypt all traffic, including credentials and file contents.
Privacy first
Security
Ghost FTP keeps connection details secure and files private. Desktop transfers connect directly to your chosen server. The browser version uses a transient Ghost FTP FTP/FTPS gateway and does not intentionally store your FTP credentials or transferred file contents.
Download Ghost FTPSFTP · FTPS · FTP
Six layers of protection
Secure from
the first connection.
Locally stored credentials
In the desktop app, saved credentials are encrypted on your computer. In the browser version, passwords are not saved in browser storage; they are sent over HTTPS only when needed for the requested web FTP/FTPS operation and are not intentionally persisted by Ghost FTP.
Private-key authentication
Use an SSH key instead of a password, with support for passphrases and agent keys.
Integrity verification
File size and checksum are verified after transfer to make sure every file is complete.
Server verification
The server fingerprint is shown on first connection and checked every time after that.
No tracking
The desktop app does not send file contents or saved server credentials to Ghost FTP. The web FTP/FTPS/SFTP gateway processes only the connection and file data required for the operation you request and does not intentionally persist that session content.
Recommendations
Good habits.
Calmer work.
A few simple settings add another layer of protection for your servers and files.
- Use SFTP or FTPS whenever your server supports it.
- Protect your private key with a passphrase.
- Enable automatic locking for saved credentials.
- Keep Ghost FTP updated to the latest version.
- Verify the installer checksum before installation.
Your rights
Your data stays
with you.
- Ghost FTP works without an account or sign-in.
- All settings and connections are stored locally on your computer.
- Anonymous analytics are disabled by default.
- Read the details in our privacy policy.