26.10.10 14:45
Skip to content
Network & Cloud Standard, noLegal, Photos, Legacy, VR and FOSS Recipe #02

SFTP and FTP - every edition except Lite. Signing in with an SSH key, pinning the server and sharing or importing access files - Standard, noLegal, Photos, Legacy and VR (not Lite, not FOSS); the watch's own connection test - Standard, noLegal, Lite, Photos, Legacy, VR and FOSS.

Connecting SFTP and FTP Servers

Add an FTP or SFTP server by address, sign in with a password or an SSH key, let the app confirm the server's identity once and re-check it on every visit, and hand a folder to someone else - or receive one from them - as a single shared file. Testing the same kind of resource from a paired watch is covered too.

Why You'll Love This

A home NAS with SMB turned off, a server that only opens once you are outside your own house, a friend's computer whose folder they want to hand you without reading out a password over the phone - these are jobs for FTP or SFTP rather than SMB. Unlike a shared Windows folder, an FTP or SFTP server is reached by its address from anywhere, which is exactly what makes it worth setting up carefully: with SFTP, the app can also confirm it is still talking to the same server every single time, not just the first.

If you have not decided between SMB and SFTP yet, Connecting SMB/Windows shares has a short comparison at the end.

Before You Begin: Ingredients & Prerequisites
  • FastMediaSorter in any edition except Lite - see The seven editions.
  • The server's address and port, and either a user name with a password or an SSH key.
  • For key sign-in: the private key file, and its passphrase if it has one.
  • To share or import access to a folder: any app that can send a file, such as Telegram or email.
1

Add a server by address

On the main screen tap Add, then SFTP / FTP - the Add S/FTP Resource screen opens. Under Select Protocol: choose SFTP (port 22) or FTP (port 21); the Port field fills itself in, with a hint of "SFTP: 22, FTP: 21" if you change your mind. Enter the Host (the server's address) - the field itself explains it wants a "Server IP address", though a domain name works too.

SFTP encrypts the whole conversation; plain FTP does not, so pick FTP only when a server does not offer SFTP at all.

The Add S/FTP Resource screen with the SFTP/FTP protocol switch and the Host and Port fields filled in
Pick a protocol, then the server's address.
2

Sign in with a password or an SSH key

Under Sign-in method choose Password or SSH Key. Password sign-in just needs Username and Password, the same as any other account.

For SSH Key, paste the key into Private SSH key or tap Load File to pick the file from storage, and fill in Key Passphrase (optional) if the key itself is encrypted - leave it empty otherwise. A key that will not parse says "Invalid SSH private key format" right away, before you waste a connection attempt on it. If your device already came with some server folders pre-configured through a bundled setup file, those can use a key the same way, with nothing left for you to type.

The SSH Key sign-in section with the Private SSH key field, Load File button and Key Passphrase field
Paste a key or load it from a file.
3

Test the connection, and let the app remember this server

Tap Test Connection. The first time an SFTP server answers, its identity is worth pinning: open Server verification (optional) - "Optional security that confirms the server is genuine" - where the app can show "Server host key fingerprint: " with a Pin Host Key button, or you can paste one yourself into Expected host key fingerprint (SHA256, optional) if you already know it. Pinning it means "Server host key fingerprint pinned" and the app will only ever trust that one key for this resource from now on.

This step is optional by design - most people can skip it and just add the resource - but it is the one thing that turns "probably the right server" into "definitely the right server."

The Connection Test - Success dialog for an SFTP server, showing the server host key fingerprint and the Pin Host Key button
Pin the server's identity once, on the first connection.
In plain words, what a host key fingerprint is

Every SFTP server has its own private identity key, and the fingerprint is a short code computed from it. Pinning it is like remembering a face instead of just a name - if someone else's server later answers under the same address, the fingerprint gives it away.

4

The server's identity is checked every time, not just once

A pinned host key is verified on every connection this resource makes from then on - browsing, thumbnails, playback and its reconnects alike, not only when you press Test Connection. If a server ever answers with a different key than the one you pinned, the app refuses it outright: "This shared folder's server looks different from the one you paired with. Nothing was loaded, to keep you safe." That is what a genuine man-in-the-middle attempt looks like from the inside, and it is also exactly what happens, harmlessly, if a server was reinstalled and issued itself a new key - re-pin it once you are sure it is really the same place.

Image Bookmark [Planned] Screenshot: Host key mismatch

Opening an SFTP resource whose server key differs from the pinned one.

Profile: phone ID: network.sftp-host-key-mismatch
5

Send someone access to a folder you already added

Open an SFTP resource's menu and tap Share access... On the Share SFTP access screen, "This file contains the access password. Send it only to people you trust." - tick Do not include the password to leave it out and tell the other person separately instead. If the server only answers on your home network, the screen adds "This server is on your local network - the recipient can connect only from the same network."

Tap Share and the system share sheet opens - send the file over Telegram, email, or anything else installed on your phone.

The Share SFTP access screen with the password warning, the Do not include the password checkbox and the Share button
Share access to a folder, password optional.
6

Add a folder someone shared with you

Tap a received access file, in Telegram or in an email attachment, and Import access opens on its own, asking to add the SFTP resource with however many folders it carries; if the file left the password out, you are asked for it there. Tap Import and the resource is ready to open, no address or key to type by hand.

You can start the same import deliberately, too: the Add Resource screen and the SFTP form itself both offer Import from file next to the usual resource cards, and Import by barcode to scan a QR code with the camera instead, when there is no file to open.

The Import access dialog confirming the SFTP resource name, server and folder count, with a password field shown
One tap on a received file adds the resource.
This is also how a shared PC folder arrives

A folder shared from Fast Media Sorter & Sharing for Windows uses the same file format and the same import dialog - see Sharing PC folders with Fast Media Sorter & Sharing for Windows.

7

A few things the app handles quietly

  • A folder scan that cannot finish says so. Scanning an SFTP folder ends in bounded time even when the network changes mid-scan or a connection goes half-open - "The folder is taking too long to load. Check your network and try again." instead of a spinner that never stops.
  • A server that was just unreachable is not retried the hard way every time. For a short cooldown after a failed connection, the app answers fast instead of making every thumbnail or file wait through a full connection timeout again.
Image Bookmark [Planned] Screenshot: Folder load timeout

Browse on an SFTP resource after the network dropped mid-scan.

Profile: phone ID: network.sftp-folder-load-timeout

What You Get

A server you reach by address - on your own network or anywhere on the internet - opens with a password or a key, its identity is confirmed once and checked on every visit after that, and handing someone else access to a folder, or receiving access to theirs, is one shared file away.

Tips and Troubleshooting