Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

To host files on a Windows 11 PC, install FileZilla Server, enable encrypted FTP over TLS (FTPS), create a restricted user and shared folder, then connect from another computer with an FTP client. Start with local-network access: making the server available over the internet also requires passive-mode settings, Windows Firewall rules and router forwarding. FileZilla Client is for connecting to servers; it does not host one.

Choose local-network or internet access

Decide who needs to reach the files before changing network settings. For access only from devices on the same home network, set up and test the server on the LAN first. Internet access adds a public address or hostname, firewall configuration and router/NAT forwarding.

FTP uses separate connections for commands and file data. In passive mode, the client must be able to reach the address and data port advertised by the server. That is why a login can succeed while a directory listing or transfer hangs. FileZilla explains the passive data connection in its passive-mode documentation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Install FileZilla Server and open its administration interface

  1. Download and install FileZilla Server for Windows. Install the server, not just FileZilla Client: the server accepts incoming connections, while its Administration Interface is used to configure the service.
  2. Connect the Administration Interface to the server using the installer’s current instructions. The installer and settings can change between releases, so follow the screens for the version you install.
  3. If prompted to verify the server’s TLS certificate fingerprint, compare it with the fingerprint shown during installation or in the server log. Do not automatically trust a fingerprint that has changed unexpectedly.

Enable FTPS and require encryption

Configure FTP over TLS (FTPS), create or select a certificate, and require encrypted connections for user logins and transfers. A self-signed certificate can encrypt traffic, but a client may warn that it does not recognize the certificate issuer; verify the expected fingerprint before accepting it. FileZilla’s server configuration guide covers the available settings.

#1 Best Overall
DELL Optiplex 7060 SFF Desktop Computer PC | Intel 8th Gen i7-8700 (6 Core) | 32GB DDR4 Ram 512GB NVMe M.2 SSD | Built-in WiFi & Bluetooth | Windows 11 Pro | Wireless Keyboard & Mouse(Renewed)
  • Powerful 8th Generation Processor - The Dell OptiPlex 7060 desktop computer is powered by an Intel 6-core 8th Generation i7-8700 processor, which can reach up to 4.60 Ghz, enabling efficient multitasking.
  • Microsoft Windows 11 Pro – This Dell small form factor desktop computer comes pre-installed with the Windows 11 Professional operating system. Microsoft has reimagined how the PC should work for you and alongside you, and this Windows 11-powered desktop is redefining productivity.
  • Smooth Multitasking – The Dell OptiPlex is equipped with a blazing-fast new 512GB M.2 NVMe solid-state drive (SSD), which stores important files and applications while supporting faster boot speeds and higher data transfer rates.
  • High-Performance Office Desktop – This business desktop computer serves as a reliable workstation, suitable for both home and business computing. The spacious desktop tower case allows for future expansion, making it an excellent fit for use as an office PC.
  • Rich Ports – This Dell OptiPlex computer is equipped with 5 USB 3.0 ports, 2 USB 2.0 ports, and 2 DisplayPort ports, supporting dual-monitor connections. Additionally, a wireless keyboard and mouse are included.

Do not leave plaintext FTP available as a fallback for credentials or file transfers. NIST’s SP 1800-25 Volume C gives a worked FileZilla Server example that enables FTPS and disallows unencrypted FTP. That example uses FileZilla Server 0.9.60.2, so treat it as a security concept, not a guide to current menus.

FTPS is not SFTP

FTPS secures the FTP protocol with TLS. SFTP is a separate, SSH-based protocol. Do not assume that a standard FileZilla Server installation accepts SFTP; check the exact edition and release if SFTP is a requirement. FileZilla Pro Enterprise documentation lists SFTP as an enterprise feature.

Rank #2
Dell Windows 11 Desktop Computer OptiPlex 5060 | Intel Core i5-8500 Six Core (4.3GHz Turbo) | 16GB DDR4 RAM | 500GB SSD Solid State + 1TB HDD | WiFi + Bluetooth | Home or Office PC (Renewed)
  • Connectivity: Includes WiFi, Bluetooth, and LAN for wireless and wired connections
  • Memory: Features 16GB DDR4 RAM for smooth multitasking and performance
  • Storage: Combines 500GB SSD and 1TB HDD for ample storage space
  • Graphics: Integrated Intel UHD Graphics 630 for crisp visuals and video playback
  • Design: Sleek desktop tower with black color and slim profile for modern look

Create a user and limit its access

  1. Create a dedicated server account for the person or devices that need access. Use a strong, unique password rather than a Windows account password reused elsewhere.
  2. Assign the account a home directory containing only the files intended for sharing. Avoid pointing it at the whole Windows user profile or a drive root.
  3. Grant only the operations needed. For downloads, allow the read and directory-listing access needed to browse and retrieve files. For uploads, allow the required write or append and directory-creation operations. Remove permissions the user does not need.

The exact labels can vary by FileZilla Server version. NIST’s example shows the underlying approach: a chosen home directory and upload permissions for a specific user.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Configure access from outside your home network

Skip this section if the server is LAN-only. For internet access, configure FileZilla’s passive mode with a manageable custom data-port range and the public IP address or hostname external clients should use. Then allow the FTP control connection and that passive range through Windows Defender Firewall, and forward the corresponding traffic in the router to the server PC’s stable local IP address.

Rank #3
Dell OptiPlex 7070 SFF Desktop Computer PC, Intel 8 Core i7-9700 3.0GHz up to 4.70GHz,32GB DDR4 Ram New 1TB NVMe M.2 SSD,AX210 Built-in WiFi 6E,Windows 11 Pro, Wireless Keyboard & Mouse (Renewed)
  • Powerful 9th Gen Processor - The Dell OptiPlex 7070 desktop computer driven by the Intel 8 Core 9th generation i7-9700 processor upto 4.70 Ghz for efficient multitasking.
  • Microsoft Windows 11 Pro - This Dell small form factor desktop is Pre-installed with the Windows 11 Professional operating system,Microsoft has re-imagined how the PC should work for you and with you. This Windows 11 desktop computer is redefining productivity.
  • Multitask Smoothly - The Dell OptiPlex is equipped with a blazing fast New 1TB M.2 NVMe SSD to store important files and applications, support faster Boot speed and faster storage rates.
  • High Performance Office Desktop- The business desktop computer is a solid workstation that is suitable for both home and business computing. The roomy desktop tower case allows for future expansion making it a great fit for an office PC.
  • Rich Ports - This Dell OptiPlex Computer with 5 x USB 3.1 ports,4 x USB 2.0 ports, 2 x display ports,which support for two displays. Also wireless keyboard & mouse.

Use the narrowest rules that support your intended access. A public IP can change; a hostname is useful when users need a consistent destination, but it must resolve to the current public address. FileZilla’s passive-mode instructions explain the advertised address and port. Microsoft’s FTP Firewall Support documentation describes the same general passive-port and external-firewall concepts for IIS; its menu instructions are not FileZilla settings.

Do not treat a successful LAN test as proof that internet access works. NAT, router forwarding, the advertised passive address and firewall rules all affect the external data connection. Microsoft’s IIS documentation describes passive FTP ports in the range 1025–65535, but that is not a FileZilla-specific limit.

Connect from another computer and verify the setup

  1. Open an FTP client on a different device and create a connection using the server PC’s LAN address for a local test, or its public hostname/address for an external test.
  2. Select explicit FTP over TLS (FTPS), not plain FTP. Review the certificate warning and verify the fingerprint if the client prompts you.
  3. Test login, directory listing, upload and download as separate operations. Confirm each succeeds only where the account’s permissions allow it.
  4. If internet access is intended, repeat the test from a genuinely external network, such as a device using cellular data rather than the home Wi-Fi.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshoot failed logins, listings and transfers

  • Connection or login fails: Check that FileZilla Server is running, the destination address and port are correct, the account is enabled, and the control connection is allowed through the host firewall. For external access, confirm router forwarding points to the server PC’s current local address.
  • Login works but listing or transfer hangs: Check the passive-mode port range, the address FileZilla advertises to clients, and whether that range is allowed through both Windows Firewall and the router. A client must reach the advertised address and data port after login.
  • LAN works but external access fails: Recheck public address or hostname, NAT forwarding and external firewall rules. Test from outside the home network; an internal test does not verify the public route.
  • Certificate warning appears: A self-signed certificate may not be trusted by the client. Verify its fingerprint through a trusted channel; do not bypass a changed or unexpected fingerprint without investigation.
  • Uploads or downloads are denied: Review the account’s home folder and permissions. The account needs the relevant read/list permissions for downloads or write/append and directory-creation permissions for uploads.

Use the FileZilla Server log and the client’s message log to identify whether the failure occurs at connection, authentication, directory listing or data transfer.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Sale
Mini PC, Intel Core i3-8109U (up to 3.6GHz), 12GB RAM 256GB SSD
  • Iris Plus 655 Graphics with 128MB eDRAM - Smooth 4K Streaming & Casual Gaming, No Dedicated GPU Needed. Delivers fluid 4K video playback and a responsive experience in light online games, far outperforming standard integrated graphics. The perfect compact hub for home theater and everyday entertainment
  • 3.0GHZ BASE & SUSTAINED 28W PERFORMANCE - Effortlessly Smooth Speed for Remote Work, Streaming, Online Classes & Daily Apps. This mini pc is powered by the Intel Core i3-8109U, it runs at a brisk 3.0GHz (up to 3.6GHz Turbo) and leverages a 28W TDP to maintain higher clock speeds longer than standard 15W processors. This translates to consistently responsive multitasking and a slowdown-free experience across all your daily digital tasks
  • EASILY UPGRADEABLE FOR FUTURE NEEDS WITH DUAL SSD SLOTS - Start with smooth performance for daily tasks using the 12 GB RAM and fast 256GB M.2 2280 NVMe SSD, ideal for work-from-home, online learning, and family entertainment. When ready, add a second SSD (up to 4TB total) for ample storage of media libraries, projects, or use as a home server
  • CREATE A TRUE DUAL 4K WORKSPACE & MAXIMIZE PRODUCTIVITY - This mini PC supports simultaneous dual 4K display output via HDMI, and DisplayPort. Effortlessly manage multiple windows for professional workflows like financial trading with live charts, software development, content creation with side-by-side previews, or extensive research
  • STAY PRODUCTIVE WITH ROCK-SOLID WIRELESS CONNECTIVITY - Featuring Dual-Band WiFi for stable and fast internet, perfect for lag-free video calls, smooth HD streaming, and reliable browsing. The integrated Bluetooth easily connects your keyboard, mouse, headphones, and other wireless peripherals for a clean, cord-free home office or entertainment setup

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.