One of the handy features in the latest WordPress is the support to upgrade plugins in one click through the WordPress administration interface. It needs FTP or FTPS access to the server where you have hosted your WordPress installation. But turning on FTP for users (non-anonymous) is a bad idea. Using FTP involves transferring user passwords as plain text during authentication. This is a great security concern and the primary reason for why one shouldn’t turn on FTP for user accounts. However, WordPress also supports FTPS, FTP over SSL. This shouldn’t be confused with SSH FTP or Secure FTP. FTPS uses TLS or SSL for authentication and commands. Let us see how to setup FTPS on a server using vsftpd.
Step 1: Install vsftpd
Using the package manager for your distribution, install vsftpd. On Debian and Ubuntu, it can be installed by the following command.
$ sudo apt-get install vsftpd
Step 2: Configure FTPS
Edit /etc/vsftpd.conf and do the following.