---
page_source: https://juspay.io/in/docs/dashboard/docs/payments/sftp-access-setup
page_title: SFTP Access Setup
---


# SFTP Access Setup for Merchant




## Purpose



This document outlines the prerequisites and setup process for enabling SFTP access for the merchant to securely exchange files with Juspay.


## 1. Prerequisites from Merchant



The merchant must share the following details for SFTP access configuration:


### 1. Merchant's NAT IPs



* The list of NAT IP addresses from which the merchant will connect to the SFTP server.
* These IPs will be whitelisted at Juspay's end.
* Connections will be restricted only to the provided NAT IPs — access from any other IPs will not be allowed.


### 2. Public Key for Authentication



* RSA 2048-bit public key to be used for key-based authentication.
* The corresponding private key must be securely maintained by the merchant.


## 2. Access Configuration by Juspay



Once the above details are received, Juspay will:

1. Configure SFTP access and whitelist the provided NAT IPs.
2. Create a dedicated SFTP user for the merchant.
3. Share the credentials securely over email.


## 3. SFTP Connection Details




| Parameter | Value |
|---|---|
| Username | To be shared |
| Host | To be shared |
| Port | To be shared |
| Protocol | SFTP (SSH File Transfer Protocol) |



## 4. Sample SFTP Command



Below is a sample command for connecting to the SFTP server using your private key:


#### Sample Command Code Snippet:

```sample command
sftp -i /path/to/private_key.pem <username>@<hostname>

```


**Example:** 


#### Example Code Snippet:

```example
sftp -i ~/.ssh/juspay_merchant_key.pem merchant_user@sftp.juspay.in

```


After successful connection, standard SFTP commands such as `ls`, `get`, `put`, and `exit` can be used.


## 5. Additional Notes



* Only the whitelisted NAT IPs will have access to the SFTP server.
* The merchant will not be able to access the SFTP from any other location or network.
* Authentication will be strictly through the RSA 2048 public/private key pair.