WordPress.com Opens Up: SFTP and Database Access Arrive

WordPress.com's Business and eCommerce plans now include direct SFTP and database access, a move that bridges the gap between managed hosting and self-hosted flexibility. Users who have long viewed WordPress.com as a locked-down platform will find they can now reach the underlying files and data that power their sites.

Turning On the Access

Enabling the feature is straightforward: navigate to Manage > Hosting Configuration in the site settings, and the SFTP credentials will be provided. Once enabled, an SFTP client connects without issue, revealing the familiar structure of a WordPress installation.

The New Capabilities

The SFTP connection exposes core directory folders directly—including plugins, themes, and uploads. With this level of access, users can:

  • Upload and activate custom themes
  • Install and use custom plugins
  • Bulk upload assets as needed

This marks a substantial shift for WordPress.com, where many assumed that choosing the managed platform meant accepting limited control in exchange for speed, security, and simplicity. With direct file access now on the table, the distinction between managed and self-hosted installations becomes less clear, and the right choice depends largely on the user's own needs.

Database Management Included

In addition to file access, a dedicated button in the hosting settings provides direct entry to the database via phpMyAdmin.

Practical Limitations

Some restrictions remain, and they align sensibly with the managed-hosting model. When connecting via SFTP, certain themes exist only as symlinks in the themes folder—links that cannot be modified. This is the case with the TwentySixteen theme installed on a test blog; the symlink points to an official, WordPress.com-maintained copy that receives automatic updates. Users looking to customize such a theme would need to upload their own copy, after which they become responsible for updates.

PHP Version Control

A separate but useful feature in the same settings area is the ability to switch PHP versions. This kind of flexibility often requires a support request on traditional hosts, but WordPress.com makes the selection readily accessible from the site's hosting configuration.

Optional Depth

None of these controls are required to run a WordPress.com site. They exist for users who need deeper customization or simply prefer to tinker—whether that means connecting briefly over SFTP to adjust template details or standing up a full development environment and deploying over SFTP on demand. The workflow choice is left entirely to the site owner.