SFTP by Zapier Explained: How to Automate Secure File Transfers

A practical field guide from Automation Ace.

What is SFTP by Zapier?

SFTP by Zapier is a built-in Zapier app that connects your SFTP server to thousands of other apps. It can start a Zap when a file is added or changed in a folder on your server, and it can upload files to or download files from the server as steps in a workflow. That turns manual file drops, like logging in with an SFTP client to fetch a nightly report, into automated, logged, repeatable processes.

SFTP is the secure, SSH-based file transfer protocol most partners require; the differences from FTP and FTPS are covered in SFTP vs FTP vs FTPS. SFTP by Zapier sits alongside other built-in Zapier tools on the Zapier platform.

Triggers and actions

• New or Updated File (trigger): fires when a file is added to or modified in the folder you choose on the SFTP server.
• Upload File (action): writes a file from an earlier step to a path on the server.
• Download File (action): retrieves a file at a given path so later steps can process, store, or forward it.

These are the core operations described in Zapier's app listing and help docs. Check the app page or how to see an app's triggers and actions for the current full list.

What you need to connect

• An SFTP server with remote access enabled, your own or a partner's.
• Hostname or IP address and port, usually 22.
• Username plus a password or SSH private key. Key authentication is more secure and easier to rotate.
• Network access from Zapier. If the server restricts connections by IP, allowlist the IP addresses Zapier publishes for outbound connections.

Ask the server owner for a dedicated automation account limited to the folders the Zap needs. See authentication tips for connecting apps and labeling multiple connections.

How an SFTP Zap works

Inbound:  SFTP New or Updated File (/outbound-from-partner)
          → Download File → parse CSV (Formatter / Code)
          → create or update records (CRM, Airtable, Sheets)
          → notify owner, log the run

Outbound: Schedule or app event
          → build file (Code / export from app)
          → SFTP Upload File (/inbound-to-partner/report-2026-09-29.csv)
          → confirm and log

Step-by-step builds for both directions are in how to automate file uploads, downloads, and processing.

When to use SFTP by Zapier

• A partner, bank, vendor, or payroll provider exchanges files by SFTP and you want to stop moving them by hand.
• A legacy or on-premises system can drop files on a server but has no API.
• You need to deliver reports or exports to a client's SFTP folder on a schedule.
• You need an audit trail of when files arrived, were processed, and where the data went.

For ten concrete examples, see 10 practical use cases for SFTP by Zapier. If you are choosing between SFTP and tools like Dropbox or Google Drive, read SFTP vs cloud storage.

Limitations and gotchas

• Polling, not instant. The file trigger checks the folder on your plan's interval. See polling vs instant triggers.
• Large files. Very large transfers can time out. Keep files reasonably sized or split them, and test with realistic volumes.
• Partial uploads. A trigger may see a file while the sender is still writing it. Ask partners to upload with a temporary name and rename when complete, or add a short Delay.
• Updated files re-trigger. Because the trigger watches updates too, design for idempotency so reprocessing does not create duplicates.
• Credential and firewall changes silently break connections. Monitor with error alerts.
• File contents in later steps. Parsing CSV, XML, or fixed-width files often needs Formatter or a Code step. See CSV automation with Files by Zapier and getting file contents in Code steps.

Security best practices

• Prefer SSH keys over passwords, and rotate them on a schedule.
• Use a least-privilege account restricted to specific folders.
• Do not copy sensitive files into tools that do not need them, and check for PII before any AI step.
• Document the server, account owner, and key location so a departure does not strand the automation. See what happens when the builder leaves.

Ready to try it? Connect your server with SFTP by Zapier and start with one inbound or outbound file.

Frequently asked questions

What is SFTP by Zapier?

SFTP by Zapier is a built-in Zapier app that connects an SFTP server to other apps. It can trigger a Zap when a file is added or updated in a folder, and it can upload and download files as workflow steps.

What do I need to connect an SFTP server to Zapier?

You need an SFTP server with remote access enabled, the hostname or IP address, the port, a username, and a password or SSH private key. If the server restricts access by IP, allowlist Zapier's published IP addresses.

Does SFTP by Zapier support SSH keys?

Yes. Zapier's help documentation lists a password or an SSH private key as authentication options. Keys are generally more secure and easier to rotate.

Is the SFTP by Zapier trigger instant?

No. The New or Updated File trigger polls the folder on your plan's update interval, so there can be a short delay between a file arriving and the Zap running.

Why did my SFTP Zap process the same file twice?

The trigger fires on new and updated files, so a file that is modified or re-uploaded can trigger again. Track processed file names or checksums and skip files you have already handled.