Hosted SFTP & FTP storage
Your own SFTP and FTP server, run by PushFTP. Nothing to install or maintain.
What it is
Hosted storage gives you SFTP and FTP logins on PushFTP's server, with the files kept in cloud storage. Create a storage account, give the login to a partner, a scanner or an IP camera, and files land in your account. You manage them in the browser, over SFTP or FTP, or through the API.
It's the opposite of a connection: a connection lets PushFTP reach your own server; hosted storage is the server.
Create a storage account
Open Storage
In the dashboard, go to Storage and click New account.
Pick a username and password
The username is the SFTP/FTP login: 3–32 characters, lowercase letters, numbers, dots, hyphens and underscores. It can't be changed later. The password needs at least 8 characters. The account name is optional and only shown to you.
Choose the access
Read & write, read only, or upload only. See access modes; you can change it later.
Storage per plan
| Plan | Storage accounts | Storage |
|---|---|---|
| Free | 1 | 500 MB |
| Starter | 5 | 25 GB |
| Pro | 20 | 100 GB |
| Business | 100 | 500 GB |
Storage is shared by all your storage accounts. When it's full, new uploads are refused; nothing is deleted. Replacing a file only counts the difference in size.
Connect
# SFTP from a terminal sftp -P 2222 [email protected] # FileZilla, Cyberduck, WinSCP sftp://[email protected]:2222 # Upload with curl over FTP curl -T report.csv --user username ftp://178.104.35.54/
- SFTP host key (ED25519):
SHA256:NaIgW0G4lMbwReZgXWN9MpQIH/wBCwXQYOatswgd3xI. Check it the first time you connect. - SSH keys: add an
ssh-ed25519orssh-rsapublic key on the storage account's page. Password login keeps working. - FTP uses passive mode (data ports 10000–10100). Encrypted FTP (FTPS, explicit TLS) is supported; the certificate is issued to pushftp.com, so a client connecting by IP address may ask you to confirm it.
- After 10 failed password logins in 15 minutes, an IP address is blocked from logging in for up to 15 minutes.
IP cameras and scanners
Most cameras, NVRs and scanners can upload over FTP. Use these settings:
Give devices upload only access, so a leaked password can't download or delete anything, and turn on auto-delete so old snapshots don't fill your storage.
Access modes
| Mode | The SFTP/FTP login can |
|---|---|
| Read & write | Everything: upload, download, rename, delete, create folders. |
| Read only | List and download. No changes. |
| Upload only | Upload and create folders. It can see file names but can't download, rename or delete; uploading a file with an existing name replaces it. |
The mode only applies to the SFTP/FTP login. You always keep full access in the browser and through the API. Changes apply from the next connection.
Auto-delete old files
On the storage account's page, set Delete files older than (days). Every hour, PushFTP deletes files in that account, in all folders, that were uploaded or last replaced longer ago than that. Folders stay. 0 keeps files forever.
Upload notifications
Get told about every new file, whether it arrived over SFTP, FTP, the browser or the API. On the storage account's page, add a webhook URL, tick Email me on every upload, or both. The webhook receives one POST per file:
{
"event": "file.uploaded",
"account": { "id": "Xk2f9…", "username": "acme-drop" },
"file": {
"filename": "invoice-0042.pdf",
"path": "/incoming/invoice-0042.pdf",
"size": 48213
},
"timestamp": "2026-10-20T09:15:00.000Z"
}Each notification is sent once, without retries. Email is best for occasional drop-offs; for busy cameras use the webhook or nothing. To start a Zap when a file lands, paste a "Webhooks by Zapier" catch-hook URL here.
File manager
Open a storage account and click Browse Files. You can upload (drag files onto the page), create folders, rename, move (drag onto a folder), delete, download, preview images and text files, and play videos.
Share links
In the file manager, right-click a file and choose Share link. Anyone with the link can preview and download the file without a PushFTP account. Links expire after 1 hour, 1 day, 7 days or 30 days, or never, and can have a maximum number of downloads. Revoke a link at any time under Share links on the storage account's page.
Good to know
- Uploads can't be appended to or resumed over SFTP or FTP; resuming downloads works.
- A failed or cancelled upload never leaves a half-written file, and a file it would have replaced stays as it was.
- Disable account blocks its SFTP/FTP logins and its share links without deleting anything.
- Hosted storage uploads don't count toward your monthly transfers.
Use it from the API and Zapier
The Hosted Storage API lists accounts and files, uploads, downloads, deletes, creates folders, moves files and creates share links, with the same API key as the rest of the API:
curl "https://pushftp.com/api/hosted/files?accountId=ACCOUNT_ID&path=/incoming" \ -H "Authorization: Bearer pftp_your_key"
To use a storage account in Zapier or with the connection-based endpoints, add a connection of type SFTP to 178.104.35.54, port 2222, with the storage account's username and password. It counts toward your plan's connections.