How to install and configure vsftpd


This tutorial focuses on how to setup vsftpd server on your linux based VPS or a dedicated server. The vsftpd stands for “Very Secure FTP Daemon”. It is not just secure as the name suggests but also delivers excellent performance by consuming less memory. The tutorial also teaches you how to configure by adding ftp users and locking the directory to individual users.


You can install vsftpd on Ubuntu / Debian, CentOS /Fedora and RHEL linux.

Installing vsftpd on Ubuntu or Debian

sudo apt-get install vsftpd

Installing vsftpd on CentOS / Fedora

yum install vsftpd

How to configure vsftpd:

Now that you’ve installed vsftpd, follow this procedure to configure it. These steps applies for both the linux variants.

Before you get started, stop the vsftpd by typing:

service vsftpd stop

Edit the vsftp.conf

In Ubuntu / Debian:

vim /etc/vsftpd.conf

In Red Hat / CentOS

vim /etc/vsftpd/vsftpd.conf

Make the following changes:

We don’t want anonymous login:



Enable local users:

Uncomment the “local_enable=YES” line (else you’ll get an error like ’500 OOPS: vsftpd: both local and anonymous access disabled!’)



The ftpuser should be able to write data:

Uncomment the “write_enable=YES” line (else you’ll get an error like ’550 Permission denied.’ from your FTP client when you upload a file or create a directory)



Port 20 need to turned off, makes vsftpd run less privileged:



Chroot everyone:

Add a “chroot_local_user=YES” line. This will trap your FTP users in their own /home/username directory. Otherwise they will be able to see and update some files outside their home directory.



set umask to 022 to make sure that all the files (644) and folders (755) you upload get the proper permissions.



Now that basic configuration is complete, now let us begin with locking / securing a directory to user.

sudo useradd -d /var/www/path/to/your/dir -s /usr/sbin/nologin ftpuser

Setup a password for the user:

sudo passwd ftpuser

In order to enable the ftpuser read and write the data in your home dir, change the permission and take ownership:

sudo chown ftpuser  -R /var/www/path/to/your/dir

sudo chmod 775 /var/www/path/to/your/dir

Create userlist file and add the user:

Ubuntu / Debian:

vim /etc/vsftpd.userlist

CentOS / Fedora

vim /etc/vsftpd/vsftpd.userlist

and add the user:


save the file and open the vsftp.conf file again:

vim /etc/vsftpd.conf

Add the following lines at the end of the file and save it:

# the list of users to give access


# this list is on


# It is not a list of users to deny ftp access



After completing all these procedures it is almost ready to use it, give it a try but you will get a “500 OOPS permission denied error”. To fix it you need to add a nologin to the shell set.

vim /etc/shells

The file should look like this:









Add this line at the end:


Now create a usergroup and add the ftpuser to it:

sudo addgroup ftpusers

sudo usermod -Gftpusers ftpuser

Now start the vsftpd:

service vsftpd start

That’s it. Now you have a secure installation of vsftpd on your server.