Rotate an additional FTP account password when access changes or a credential may have been exposed. The main hosting account credential is managed separately, and a subordinate FTP password change should not be confused with changing a Linux root password.
IN THIS ARTICLE
Prepare for the change
Identify the full FTP username and the websites or deployment tools using it. Generate a unique new password and arrange an update with authorized collaborators. If access is no longer needed, suspension or deletion may be more appropriate than another password.
01 Change an additional FTP account password in DirectAdmin
- Open Account Manager > FTP Management.
- Select the additional FTP account whose password must change. Confirm the directory scope before editing.
- Enter or generate the new password and choose the save or modify action. Preserve the intended directory restriction.
- Update the authorized FTP client or deployment secret. Remove stale saved values so an automated job does not keep retrying the old credential.
- Test a new encrypted connection and a harmless file transfer. Keep the new password in an approved secret store and do not place it in a publicly readable deployment file.
How do I test the new FTP password?
Confirm the account can still reach only its intended directory and that authorized transfers succeed. Review scheduled deployment or backup jobs for authentication failures after the rotation.
If the change does not work
If you are editing the main account, follow its proper hosting-account password procedure and review the broader impact. A separate SFTP service may not use this FTP credential. For suspected compromise, also inspect uploaded files and unauthorized changes; changing the password prevents future use of that secret but does not remove existing malicious content.