Skip to content

SSH/SFTP

SFTPGo provides a full-featured SFTP server built on the SSH protocol. Shell login and port forwarding are not supported — the SSH server is dedicated to file transfer operations.

SFTP

The SFTP implementation supports version 3 of the SFTP protocol, the same version used by OpenSSH. All standard file operations are supported: read, write, rename, delete, create directories, list directories, stat, and setstat.

The statvfs@openssh.com extension is also supported, allowing clients to query available disk space.

Authentication

SFTPGo supports multiple authentication methods, which can be combined for multi-step authentication:

Method Description
Password Standard password authentication. Can be disabled per-user or globally.
Public key SSH public key authentication. Multiple keys per user are supported.
Certificate SSH certificates signed by a trusted Certificate Authority. Supports principal validation, expiration, source-address restrictions, and revocation lists. See configuration for trusted_user_ca_keys and revoked_user_certs_file.
Keyboard-interactive Challenge-response authentication. Supports external hooks for custom authentication flows (e.g., OTP, security questions). See Keyboard Interactive Authentication.
OpenPubkey (OPKSSH) OpenPubkey SSH integration via external binary. Mutually exclusive with certificate authentication.

Multi-step authentication

Authentication methods can be chained — for example, requiring both a public key and a password. When a user is configured for multi-step authentication, the SSH server returns a "partial success" after the first method succeeds, prompting the client for the next step.

Supported combinations:

  • Public key + password
  • Public key + keyboard-interactive

Multi-step authentication can be configured per-user via the denied_login_methods filter.

Cryptographic algorithms

SFTPGo supports modern cryptographic algorithms with secure defaults. All algorithm lists are configurable via the configuration file.

Key exchange (KEX)

Default algorithms (in preference order):

  1. mlkem768x25519-sha256 (post-quantum hybrid)
  2. curve25519-sha256
  3. ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521
  4. diffie-hellman-group14-sha256
  5. diffie-hellman-group-exchange-sha256

SHA-512 based KEX algorithms are available but disabled by default because they are slow. Legacy algorithms (diffie-hellman-group1-sha1, diffie-hellman-group14-sha1) are available but disabled by default for security reasons.

Ciphers

Default: aes128-gcm, aes256-gcm, chacha20-poly1305, aes128-ctr, aes192-ctr, aes256-ctr.

⚠ Additional ciphers (aes*-cbc, 3des-cbc, arcfour*) are available but disabled by default — they are insecure and an active attacker can recover plaintext.

MACs

Default: hmac-sha2-256-etm@openssh.com, hmac-sha2-256.

Host keys

If no host keys are configured, SFTPGo automatically generates id_rsa, id_ecdsa, and id_ed25519 keys in the configuration directory. Host certificates are also supported — the certificate's public key must match a configured private host key.

SSH commands

SFTPGo supports a limited set of SSH commands for specific use cases. These commands are executed within the user's security context (permissions, quotas, and home directory restrictions apply).

Command Default Description
scp Enabled Server-side SCP protocol implementation. Supports recursive transfers and remote-to-remote copy via -3. Wildcard expansion is not supported. Works with all storage backends.
md5sum Enabled Compute MD5 hash of a file.
sha1sum Enabled Compute SHA-1 hash of a file.
sha256sum Enabled Compute SHA-256 hash of a file.
sha384sum — Compute SHA-384 hash of a file.
sha512sum — Compute SHA-512 hash of a file.
cd Enabled Change directory (currently a no-op, for client compatibility).
pwd Enabled Print working directory (always returns /, for client compatibility).
sftpgo-copy — Server-side copy of files and directories. Usage: sftpgo-copy <source> <destination>.
sftpgo-remove — Server-side recursive removal of files and directories. Usage: sftpgo-remove <path>. Does not support removing across virtual folder boundaries.

Commands not in the default list must be explicitly enabled in the configuration. Set enabled_ssh_commands to * to enable all supported commands.

⚠ Hash commands read the entire file to compute the digest. For remote storage backends, this means downloading the file; for encrypted storage, this means decrypting it.

Security features

  • Algorithm enforcement — Users can require specific algorithms via the enforce_secure_algorithms filter. Connections using weaker algorithms are rejected even if the algorithms are enabled server-wide.
  • Login banner — Display a custom message before authentication by configuring login_banner_file.
  • Max authentication attempts — Configurable limit on failed authentication attempts per connection.
  • Defender integration — Failed logins, algorithm mismatches, and connection limit violations generate defender events for automatic banning. See Defender.