---
title: "Disabling Anonymous FTP"
source: "https://docs.nexcess.com/hosting/security/disabling-anonymous-ftp/"
description: "Protect your server from malicious attacks. Learn how to disable Anonymous FTP logins and uploads in WHM with this quick configuration guide."
vertical: "Hosting"
date: "2024-03-04"
last_modified: "2026-07-02"
---

# Disabling Anonymous FTP

## What is Anonymous FTP?

Anonymous FTP is a method for downloading public files using FTP (File Transfer Protocol). It is anonymous because the user doesn’t have to identify themselves before accessing the files. In many cases, the user won’t be asked for their username and password when logging into an anonymous FTP site, or when logging into your server via FTP, the user will enter *anonymous* or *ftp* as the username and use their email address as the password. Once logged in, the user has read only access to the */home/username/public\_ftp/* directory and write access (if enabled) to the */home/username/public\_ftp/incoming/* directory.

## Disable Anonymous FTP

By default, Liquid Web servers have Anonymous FTP disabled, but there may be a time that you enabled it and did not disable again after whatever you needed it for is complete. This tutorial will walk you through disabling the user from WHM and the FTP Configuration section.

1. Log into WHM.
2. From the home page of WHM, type the word *FTP* in the search bar at the top of the page.  
    ![search bar highlighted on WHM home page](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_Ray7eC.png)
3. The predictive text will narrow down the menu results. Click on **FTP Server Configuration**.  
    ![gif showing search and ftp server configuration link highlighted](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_cm2t9W.gif)
4. Scroll down to the section **Allow Anonymous Logins** and **Allow Anonymous Uploads**, select **No** from the drop-down menu.  
    ![gif showing anonymous ftp enabled to disabled](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_MsDtd1.gif)
5. Once you’ve changed these fields, click **Save**.  
    ![save button highlighted](https://docs.nexcess.com/wp-content/uploads/2026/06/help.liquidweb.com_pIRkjE.png)

Once you hit the save button, your FTP configuration will restart, when complete, Anonymous FTP is disabled. Keeping Anonymous FTP disabled helps prevent against malicious attack to your server. For more tips on protecting yourself, see our article [Best Practices: Protecting Your Website from Compromise](https://docs.nexcess.com/hosting/security/best-practices-protecting-your-website-from-compromise/).