Support
Last updated: 6 September 2026
Davide Volpato
Write in English or Italian. Replies usually within two working days.
Three situations account for most of the messages, and all three have an answer already.
sFTP Pro signs with the historical ssh-rsa algorithm, which OpenSSH 8.8 and later reject by default. Generate an ed25519 key instead — it is the modern default and works everywhere:
ssh-keygen -t ed25519, then copy the public key to the server with
ssh-copy-id.
Some servers only accept keyboard-interactive authentication, which is not supported yet. The log at the bottom of the file browser says which methods the server accepts. Connecting with a key is the way around it.
That warning means the server presented a different identity than the one you approved before. It happens legitimately after a server rebuild or a hosting migration — but it is also what an interception looks like. Check with whoever runs the server before accepting.
The version distributed through the Mac App Store runs in Apple's sandbox, so it can only read folders you point it to. The first time, choose the folder you transfer files from — your home folder, or the folder of the site you work on — and it will be remembered from then on.
For the same reason, reusing the hosts you already approved in Terminal requires granting
access to your .ssh folder once, from Preferences → Accesses.
To make a report useful, include: