gFTP vs WinSCP

gFTP is a free, multithreaded file transfer client for *NIX-based machines, known to run on Linux distributions. It supports FTP, explicit and implicit FTPS, SSH2 SFTP, and FSP. Users can choose a GTK interface or a text interface, launched with the gftp-gtk and gftp-text commands. The text interface can download a directory and its subdirectories in one run, and transfer automation is listed. SSH2 SFTP support requires the OpenSSH client. For FTPS connections to servers using self-signed certificates, the FAQ describes disabling SSL peer verification or adding the CA public key to the OpenSSL certificates directory. The documented build process uses Meson and Ninja, with GTK 3 as the default UI build. Settings and bookmarks go under the gftp configuration directory in line with the XDG Base Directory Specification. The client logs the log-window contents to gftp.log and purges the file when the program starts. The project lists 56 language translations and directs bug reports to GitHub issues. Its plan costs nothing.

WinSCP is an open-source file manager and transfer client for Microsoft Windows. It copies files between a local computer and remote computers over FTP, FTPS, SCP, SFTP, WebDAV, WebDAVS and S3, with SSH also listed as supported. Explorer and Commander interfaces provide two ways to manage transfers; Commander is focused on keyboard control. Alongside common file operations, WinSCP includes directory synchronization and an integrated text editor. For repeat tasks or programmatic workflows, it offers scripting, command-line options and a.NET assembly. The client integrates with Windows and PuTTY, including sharing site settings with PuTTY. Authentication methods include password, keyboard-interactive, public key and Kerberos, and stored site information can optionally be protected by a master password. A portable version and workspace-based session management are available. WinSCP is free, with a listed price of free. Its security guidance warns that malware on the computer running it can steal credentials stored or entered there.