Security - DeployHQ Blog

Advice and information on protecting your servers, systems, and websites.

Is FTP Dead? A Look at Its Continued Use in Deployment

Is FTP dead in 2026? No — but it should be your last resort. FTP is still used for legacy CMS hosting, shared hosting providers, and bulk file transfers, but SFTP and FTPS are safer alternatives for every use case. Here's where FTP still makes sense, where it doesn't, and how to modernise your deployment workflow.

How to Keep API Keys Out of Your Git Repository (With Code Examples)

One git push with a hardcoded API key can compromise your infrastructure. This guide covers .env file setup, language-specific examples, automated secret scanning with git-secrets and truffleHog, and how to deliver secrets to production safely with DeployHQ.

What are the differences between FTP, FTPS and SFTP?

FTP sends data unencrypted, FTPS wraps FTP in TLS, and SFTP tunnels file transfers over SSH. This guide compares all three protocols side by side, shows exactly what attackers see when you use FTP in production, and includes a step-by-step migration path from FTP to SFTP.

Keeping your DeployHQ account secure

DeployHQ offers many security configuration options for your account, such as enforcing two factor authentication, IP restricted access, and granular user restrictions.

Deploying to servers in a private network

Learn how to deploy to servers behind firewalls and private networks using the DeployHQ Agent, a lightweight proxy that creates a secure outbound connection to route deployment traffic.