SFTP password authentication signs you in with a username and password over the encrypted SSH connection. It is simple to set up, but SSH key authentication is generally more secure for automated or long-lived connections.
When you connect, the SSH channel is encrypted first, then your password is sent through that secure tunnel to authenticate. The password is never sent in clear text.
Password auth is fine for quick interactive sessions. For scripts, scheduled jobs, and shared systems, prefer SSH keys so there is no password to embed or leak.
FlowSetu's online SFTP client supports both password and SSH key authentication, and never stores either after your session ends.
Try the free online SFTP client — connect to any SFTP server from your browser, no install required.