OpenSSH SFTP server review covering sftp-server's history, features, free open-source pricing, and alternatives for secure file transfer over SSH.
OpenSSH SFTP server, or sftp-server, is the server-side component that implements the SFTP protocol within the OpenSSH suite, giving administrators secure, encrypted file transfer as a subsystem of the SSH daemon. It was written by Markus Friedl and first shipped with OpenSSH 2.3.0 in November 2000.
As part of the OpenBSD project, it is developed with the same security-first, auditable-code philosophy applied across all OpenSSH components, and is bundled by default with virtually every Linux, BSD, and macOS installation that includes OpenSSH.
sftp-server supports chrooted SFTP-only accounts, allowing administrators to restrict specific users to file transfer without granting full shell access, along with a read-only mode and configurable logging of file operations.
It is invoked automatically by sshd via the Subsystem directive and communicates with SFTP clients, most commonly the bundled sftp command-line tool, over an already-encrypted SSH session, requiring no separate encryption layer or certificate management.
sftp-server is entirely free and open source, distributed as a standard part of the OpenSSH package under a permissive BSD-style license with no licensing fees.
There is no paid tier or commercial edition of sftp-server itself; organizations needing additional workflow automation, web dashboards, or compliance reporting on top of core SFTP typically pay for separate managed file transfer platforms instead.
Yes, sftp-server is free and open source, bundled as a standard part of the OpenSSH package.
Support for the server side of SFTP was written by developer Markus Friedl and first released with OpenSSH 2.3.0 in November 2000.
It is not run directly; it is invoked automatically by the sshd daemon via the Subsystem configuration directive when an SFTP client connects.
Yes, sftp-server supports chrooted SFTP-only accounts that prevent users from getting full shell access.
No, it implements SFTP over an encrypted SSH connection, which is a different and more secure protocol than traditional FTP or FTPS.
It is bundled with virtually all Linux distributions, BSD variants, and macOS as part of the standard OpenSSH package.
Alternatives include dedicated FTP/FTPS daemons like ProFTPD, Pure-FTPd, and vsftpd, as well as commercial managed file transfer platforms like GoAnywhere MFT and Globalscape.