Manage files with the file manager, SFTP or SSH

Choose an access method

• Use the file manager for small uploads, edits and archive extraction.
• Use SFTP for reliable transfers and deployment tools. Do not use unencrypted FTP.
• Use SSH for command-line work, dependency installation and logs when shell access is included in the package.
• Use WordPress tools for routine plugin and theme actions instead of editing application files manually.

Create and protect access

1. Open the website and locate the access or developer-tools section.
2. Create a named SFTP or SSH credential for the person or system that needs it.
3. Prefer an SSH key where supported and keep the private key only on trusted devices.
4. Remove temporary accounts after a migration or contractor engagement ends.

Avoid permission problems

Enhance runs website processes inside an isolated container and performs website operations as that website's Unix user. Files uploaded through another method must remain readable and writable by the website user where the application expects it.

• Do not recursively change everything to world-writable permissions.
• Do not upload a second application into the live document root without a backup.
• Keep secrets outside publicly served directories when the application supports it.
• Ask support before changing ownership or permission rules you do not understand.