Member Avatar for london-G

Hello,

I have an FTP account(admin) and I would like to know if its possible to restrict it so that it cannot be deleted or the password cannot be changed.

I have created a website for someone and want to have access to it in the future.

  • 2 Contributors
  • 3 Replies
  • 91 Views
  • 1 Hour Discussion Span
  • Latest Post Latest Post by pritaeas

Dani AI

Generated

Short summary: do not hand over an “admin” FTP account if you want persistent access. Give the content editor a separate, limited FTP/SFTP user and keep a deployment or maintenance account you control. That approach avoids most accidental or deliberate removal and still lets the editor update content.

Practical steps you can apply now:

  1. Create a dedicated FTP/SFTP account for the editor and set its home directory to only the folder(s) they need.
  2. Keep your own account separate. Use SFTP/SSH with an SSH key (not a password) for your admin access and store the private key securely offline.
  3. Use version control (Git) as the canonical source of code and require deployments from the repository you control. This gives you a copy of the site even if FTP access is lost.
  4. Arrange automated offsite backups (daily or weekly) that you or a trusted third party can restore from.
  5. Put explicit access terms in the contract: who may create/delete accounts, how long access must be retained, and an escalation procedure if access is removed.

Notes and cautions: as observed, legal protections matter — add the access/backup clauses to the contract. If you do not control the hosting control panel, the account owner (or anyone with panel/root access) can always change or delete FTP users and SSH keys; technical measures reduce the risk but cannot make access absolutely undeletable on someone else’s host. If long-term access is critical, host a repository or a backup that you control, or ask the client to provision an account specifically for your use under a written agreement.

Recommended Answers

All 3 Replies

Member Avatar for pritaeas

If you do not own access to the website's control panel, then yes, the password can be changed.

I think this is not a matter of access but of trust. Make sure you have a decent contract.

Edited by pritaeas
Member Avatar for london-G

Someone else is expected to work on the content. I don't want him to delete my account or change my password. I completely trust the guy but don't know if the new developer will edit my account or create himself a new ftp account hence the question.

Member Avatar for pritaeas

Create one for him.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.