sftp Command in Linux: Secure File Transfer Guide

Quick take: sftp connects to a remote server over SSH and gives you an interactive prompt to browse directories, upload files with put, and download with get. Use sftp -P port user@host for non-standard ports.

What Is SFTP and How Does It Work?

sftp (Secure File Transfer Protocol) is an interactive file transfer program that runs over SSH. Unlike scp which is a one-shot copy tool, sftp opens a persistent session where you can browse the remote filesystem, manage files, and transfer in either direction — all with SSH encryption.

It is widely supported and the correct choice when you need to explore a remote server's directory structure before deciding what to transfer, or when transferring multiple files interactively.

Syntax and Connection

# Connect to a remote server
sftp user@hostname

# Connect to a non-standard SSH port (capital P)
sftp -P 2222 user@hostname

# Connect using a specific SSH key
sftp -i ~/.ssh/deploy_key user@hostname

# Connect using SSH config alias
sftp myserver

After connecting, you see a prompt: sftp>. The local and remote filesystems are both available. Commands prefixed with l (e.g. lls, lpwd) operate on the local side.

Navigating Directories

# Show current remote directory
sftp> pwd

# Show current local directory
sftp> lpwd

# List remote directory
sftp> ls -la

# List local directory
sftp> lls

# Change remote directory
sftp> cd /var/www/html

# Change local directory
sftp> lcd ~/Downloads

# Create a remote directory
sftp> mkdir uploads

# Remove a remote file
sftp> rm old_file.txt

Uploading Files

# Upload a single file to remote current directory
sftp> put local_file.txt

# Upload and rename on the remote side
sftp> put local_file.txt remote_name.txt

# Upload recursively (entire directory)
sftp> put -r ./my_project/

# Upload preserving timestamps and permissions
sftp> put -p config.conf

Downloading Files

# Download a single file to local current directory
sftp> get remote_file.txt

# Download and rename locally
sftp> get remote_file.txt local_copy.txt

# Download recursively (entire directory)
sftp> get -r /var/backups/weekly/

# Download preserving timestamps
sftp> get -p database_dump.sql

Common Options

sftp vs scp

scp is a one-shot tool: specify source and destination on the command line, and it copies then exits. It is faster for simple, known transfers because there is no session overhead.

sftp is interactive: connect once, then navigate and transfer multiple files across the session. Use sftp when you need to browse the remote server first, or when transferring many files in different locations.

For scripted, non-interactive transfers between well-known paths, scp is simpler. For anything that requires exploration or multiple operations, sftp wins.

Batch Mode and Automation

sftp can run commands from a file using -b, which enables basic automation:

# Create a batch command file
cat > upload_commands.txt <

Batch mode exits with an error code if any command fails, making it suitable for use in shell scripts. For more complex automation over SSH, consider rsync which handles incremental sync and is more script-friendly.

Using SSH Config with sftp

# ~/.ssh/config
Host webserver
    HostName 192.168.1.50
    User deploy
    Port 2222
    IdentityFile ~/.ssh/deploy_rsa
    ServerAliveInterval 60

# Connect with just:
sftp webserver

# Batch mode also works:
sftp -b commands.txt webserver

#!/bin/bash
# deploy_assets.sh — Upload build artifacts to web server

BATCH_FILE=$(mktemp)
cat > "$BATCH_FILE" <<'EOF'
cd /var/www/html
lcd ./dist
put -r .
chmod 644 index.html
chmod 755 assets
bye
EOF

sftp -b "$BATCH_FILE" deploy@webserver
EXIT_CODE=$?
rm -f "$BATCH_FILE"

if [ $EXIT_CODE -eq 0 ]; then
    echo "Deploy successful"
else
    echo "Deploy failed with exit code $EXIT_CODE" >&2
    exit 1
fi