When you verify your identity on your Web60 account, File Manager access is available immediately. However, SFTP and Terminal access requires a 24-hour waiting period before it is activated. This page explains why the delay exists for SFTP and Terminal and how it protects your website.
Why is File Manager immediate but SFTP and Terminal are not?
The File Manager runs inside your authenticated Web60 dashboard. It can only be used while you are logged in, and all actions are logged and sandboxed within the browser.
SFTP and Terminal, on the other hand, provide direct protocol-level access to your server. SFTP credentials can be saved in external software and used from any computer. Terminal access allows running arbitrary commands. These are far more powerful — and far more dangerous if misused — than the File Manager.
Because of this, we apply the 24-hour activation period only to SFTP and Terminal access.
Why 24 hours for SFTP and Terminal?
The 24-hour activation period is designed to protect you in several ways:
Compromised account protection
If someone gains access to your Web60 account (for example, by stealing your password or accessing your email), they could attempt to enable SFTP to download your website data or inject malicious code.
The 24-hour delay means that even if an attacker passes the email verification step, they cannot immediately access your files. This gives you time to notice the confirmation email, realise something is wrong, and click the Cancel Verification link in the email to undo the request before any damage is done.
Fraud and abuse prevention
Automated attacks often work by compromising accounts and immediately exploiting them. The activation delay breaks this pattern by making instant exploitation impossible. Attackers who rely on speed and automation are far less likely to wait 24 hours, especially when the delay increases the chance of detection.
IP and behaviour analysis
During the activation period, the system reviews the verification request against known threat intelligence data. This includes checking the IP address used for the request, looking for patterns that suggest automated or fraudulent activity, and cross-referencing with known abuse indicators. If anything suspicious is detected, the activation can be blocked before access is granted.
Industry best practice
Many financial services, cloud providers, and hosting platforms use similar cooling-off periods for sensitive account changes. Adding a delay before enabling powerful features is a well-established security pattern that significantly reduces the risk of account takeover attacks.
What happens after verification
Immediately:
- File Manager access is enabled across all your active sites
- You receive a confirmation email with a summary of the verification and a Cancel Verification link
- If you did not make this request, click the link to cancel immediately
During the 24-hour period:
- The system checks the SFTP/Terminal request against threat intelligence data
- A countdown is shown on the SFTP and Terminal pages in your dashboard
- You do not need to stay on the page — activation happens automatically
After 24 hours:
- SFTP and Terminal access is automatically enabled across all your active sites
- You do not need to verify again unless access is revoked
- You can connect using SFTP software like FileZilla
- You can run commands using the Terminal
Need help?
If you have questions about the verification process or need assistance, visit our support page or email hello@web60.ie.
Frequently asked questions
Can the 24-hour period be shortened or skipped?
No. The SFTP and Terminal activation period is a fixed security measure that applies to all accounts. It cannot be shortened, skipped, or overridden, even by support staff. File Manager access is available immediately and is not subject to this delay.
Do I need to stay logged in during the 24 hours?
No. The activation happens automatically in the background. You can log out, close your browser, and come back after 24 hours. Your access will be ready when you return.
Does the 24-hour delay apply every time I use SFTP?
No. The activation period only applies once, when you first verify your identity. After that, SFTP and Terminal access remain enabled permanently unless revoked by an administrator.
What if someone else verified my account?
After verification, you will receive a confirmation email with a Cancel Verification link. If you did not make the request, click the link immediately to cancel the activation. If access has already been activated, contact support at hello@web60.ie to have it revoked.
I verified 24 hours ago but still cannot access SFTP. What should I do?
Try logging out and logging back in. If the issue persists, contact support at hello@web60.ie and we will check your account status.
Last updated: 25 March 2026