Anonymous FTP lets anyone connect to a folder on your account without a username or password. It can be switched on in cPanel. In almost all cases you should leave it off, and it is off by default.
What it does
Once enabled, anybody at all can connect and, depending on the settings, download from and upload to your anonymous FTP directory. There is no login, so there is no way to know who they are.
Where users are confined
Anonymous users are restricted to the FTP directory in the root of your account. They can move into subfolders inside it, but cannot move above it into the rest of your account or your website.
Why we suggest not enabling it
- Anyone can upload. Open upload directories are found by automated scanning within hours and used to host material you would not want associated with your business.
- Whatever appears there becomes your responsibility. Our terms and conditions apply to anything available from your account, not just your website. Illegal or infringing material found there may result in immediate suspension or termination, and no refund of fees paid.
- It consumes your resources. Disk space and bandwidth used by strangers is billed to you.
What to do instead
If a particular person needs to send you files, give them their own FTP account in cPanel, restricted to a specific folder. You then know who uploaded what, and you can remove their access when the work is finished.
For occasional file sharing, a link from your website or a file sharing service is simpler and safer.
If you do enable it
Check regularly what is in there, and turn it off as soon as you no longer need it.
