Steven Frank, co-author of Transmit: Don’t use FTP. Finally someone says it! FTP is a crazy, insecure non-protocol, and the fact that it’s still used has more to do with ubiquity than any sort of merit. SFTP piggybacks on all the security of SSH and is much easier to work with. WordPress has a great feature that automatically upgrades your installed plugins — but only on FTP, not SFTP.