Unencrypted FTP in n8n
- Feb 12
- 1 min read
What this means (non-technical)
Plain FTP sends usernames, passwords, and file contents over the network without encryption. If you use FTP instead of SFTP or FTPS, your data travels in readable form.
Anyone monitoring the network traffic can potentially see it.
What usually goes wrong
Because the connection is not encrypted:
Login credentials can be intercepted.
File contents can be read in transit.
Files can be modified without you noticing.
The workflow may appear to work normally, but the connection is not secure.
If sensitive files or credentials are involved, this creates hidden exposure.
When this becomes urgent
This becomes urgent when:
You transfer customer data.
You send financial or health-related files.
The server is hosted in shared or public infrastructure.
Compliance standards apply.
Any time real business data is transferred, encryption is no longer optional.
Detect issues in your n8n workflows
|
Definitions
FTP (File Transfer Protocol): An older protocol for transferring files without built-in encryption.
SFTP / FTPS: Secure versions of FTP that encrypt data during transfer.
Disclaimer
This article highlights common patterns and risks seen in real-world n8n workflows. It’s meant to help you build more confidently and avoid surprises as your automation grows. Behavior can vary depending on your setup, version, and configuration.