---
title: SFTP
description: Exchange files with Figure over SFTP with SSH-key authentication. Use it only when object storage isn't an option.
---

{% callout type="warning" title="SFTP is not recommended" %}
Use [Google Cloud Storage](/data-integration/file-exchange/google-cloud-storage) or [AWS S3](/data-integration/file-exchange/aws-s3) if you can. They offer improved reliability and simpler lifecycle management.
{% /callout %}

SFTP requires [SSH-key authentication](/key-exchange#ssh-keys-for-sftp). Password authentication is not supported.

## Partner-hosted SFTP

Use this when Figure delivers files to you, such as [Data Export](/data-integration/data-export) files.

You provide the SFTP server. Figure provides you with its public SSH key. Add that key to the SFTP user's authorized keys on your server. When Figure connects, it uses the matching private key to authenticate; no password is used.

### What Figure needs from you

- Server hostname (e.g., `sftp.partnerbank.com` or `172.168.10.1`)
- Username
- Destination directory (if desired)
- Confirmation that the [file-exchange IP addresses](/ips#file-exchange-ip-addresses) are allowlisted

## Figure-hosted SFTP

Use this when you deliver files to Figure.

Figure provides an SFTP server. You provide your public SSH key for Figure to authorize, then connect with the matching private key.

Figure's SFTP server is for delivering files to Figure only. Read access is not supported.

### What Figure needs from you

- Your public SSH key
- The IP address or range from which you will be accessing Figure's SFTP server

### What you will need from Figure

- The SFTP server address, which is `sftp.figure.com`
- The username assigned to your organization