Is there an option to put the password on the line as well with sftp?


Like this


Generally including a password in a command line is considered a security risk because it will show up to anyone else who can run ps/top, and it may be saved in your shell's history.

It would be a much better idea to setup key-based authentication if you are able.

Also, I don't believe it is going to be possible with sftp. It is meant to be used for secure transfers. If you really had to do something like this and you have no other choice then you probably need to be looking at automating with expect.

| improve this answer | |
  • Interesting point! – Daniel Oct 13 '09 at 19:32
  • It would be a much better idea to setup key-based authentication if you are able. That's make sense. – Net Runner Jun 8 '17 at 17:48
  • This expect url is broken – André Perazzi Oct 31 '18 at 15:44
  • 7
    Can't understand why people upvote an answer that doesn't provide a solution. – itoctopus Jan 29 '19 at 14:13

As others have mentioned, a command-line password should be the last resort.

However, if nothing else is possible; one can go for ssh pass

sshpass -p <password> sftp user@host
| improve this answer | |
  • 3
    This should be massively upvoted. It is really useful to have sshpass. Some providers don't allow you to create a .ssh folder and scp is also disallowed. – NetSquirrel Jul 5 '13 at 1:38
  • 3
    good that some tools have your back: brew search sshpass -- "We won't add sshpass because it makes it too easy for novice SSH users to ruin SSH's security." – oliver Apr 4 '17 at 9:22
  • 5
    This should be the accepted solution. The OP asked how to do this specific thing - not for security advice (albeit well-intentioned and correct). – ebr Jun 8 '17 at 20:33

Don't do that - setup SSH public key authentication for automatic login.

| improve this answer | |
  • Can sftp do this the same is scp? – Daniel Oct 13 '09 at 19:32
  • 1
    @Daniel, both sftp and scp are built on SSH which allows for key-based authentication. – Zoredache Oct 13 '09 at 23:19

Just use perl, ruby or python to script what you are trying to do. In case of ruby it's just (taken from the net-sftp API docs):

require 'net/sftp'

Net::SFTP.start('host', 'username', :password => 'password') do |sftp|

  # upload a file or directory to the remote host

  sftp.upload!("/path/to/local", "/path/to/remote")


For more info http://net-ssh.rubyforge.org/sftp/v2/api/index.html

| improve this answer | |
  • paramiko is pure python (no extra libs) and works really well – qwertzguy Oct 31 '12 at 10:52

As the other answers have stated, use public key authentication. There is a great, although a little dated, IBM developerWorks series that should explain everything you want to know about it, as well as some useful supplemental tools such as keychain.

| improve this answer | |

For searchers that don't care that the password can be seen in the command-line command:

sftp userid:password@remoteHost is how to include the password in the sftp connect command.

UPDATE: this turned out to be incorrect... see comments

| improve this answer | |
  • OpenSSH v5.3p1 and v4.3p2, both on Red Hat Enterprise... – ashnazg Dec 13 '18 at 15:06
  • 1
    This turned out to be incorrect... this method appeared to work for me because PHP and its ssh2 extension were being used earlier in my code to do actual standalone authentication... and the sftp command was being run later. It was this later piece where the syntax appeared to succeed. – ashnazg Dec 13 '18 at 15:25
  • 1
    Could not resolve hostname user: No such host is known. It is considering ":" in username which is not the case in FileZilla CLI – P Satish Patro Jun 4 '19 at 15:10

I suspect that there are as many answers as there are FTP clients. An SFTP server should not accept authentication information until encryption is established, so that the user and password are protected.

I believe the FileZilla client will allow for command line passing of the user and password .. see the documentation here. Given the reputation of the FileZilla project, I would expect it to operate securely.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.