Navigation:  Administration >

Admin User

Previous pageReturn to chapter overviewNext page

An admin user account is required to administrate your server.




User Name

The admin username, the username must be unique to the server and can not contain any of the following special characters: \ / < > |:? *.%




A password is required for administration login. A strong password contains at least 10 characters including upper and lower case letters and at least one number.



Two-factor authentication (TOTP)

With this option, when you try to login the administration for the first time, you will be asked to install a TOTP app and scan a QR code, then you should enter a dynamic TOTP code which is generated by TOTP app, and the dynamic TOTP code will be required on any subsequent login.


If other admins lose their 2FA device/data, you can reset TOTP secret code by clicking the button "Reset TOTP secret code". If you (primary admin) lose your own 2FA device/data, you need to add a new admin account by launching the installer file:

Windows version: stop the WingFTP service first, then launch the installer package "WingFtpServer.exe".
Linux version: stop the WingFTP service first via "sudo /etc/init.d/wftpserver stop", then launch the setup script via "sudo ./" (under WingFTP's folder).



Read-Only Administrator

If you enable the option "Read-Only Administrator," then that administrator can't change any server settings or user data.



Domain Administrator

If you enable the option "Domain Administrator," you must select one or more domains below, then that administrator can only administrate the selected domains.



Base folder

You must enable the option "Domain Administrator" first,  to specify a base folder for that domain administrator. Then he can only be able to share files/folders under the base folder.




IP Access Tab




You can define IP access rules to allow/deny users' access based on IP address for this administrator.


If you do not specify any IP address, this administrator can log on the server from any IP address. But if you set allowed rules, the administrator will only gain access from the IP addresses specified in the allowed rules. If you set denied rules, the administrator will have access to the server from any IP address except those specified in the denied rules. The order of the rules is also critical.


For example:



Refuse connections from any IP except





Administrator from localhost

Remember whatever  IP rules you add, administrators can always login from the local IP address




Supported wildcards


Wing FTP Server supports IP address ranges and wildcards, shown as below:

The IP address must be exactly matched(e.g.,

A specified range of IP addresses, e.g.


*.*.*.* or xxx.*.*.* or*.* or*

Any valid IP address value (For example, 192.168.*.* represents any IP between and


CIDR convention is also supported : (represents any IP between and, (represents any IP between and