Is port 21 (FTP Control) dangerous?

Port 21 is classified as critical risk and should not be exposed to the public internet. It transmits data without encryption, making it vulnerable to eavesdropping and credential theft.

Should port 21 be open on my firewall?

No, port 21 should not be open to the public internet. Block it at the firewall and use encrypted alternatives such as SSH, SFTP, or HTTPS instead.

What transport protocol does port 21 use?

Port 21 (FTP Control) uses the TCP transport protocol and falls under the File Transfer category.

:21 (TCP)

FTP Control

Critical Risk

TCP — File Transfer

Port Overview

Port Number 21

Service Name FTP Control

Transport Protocol TCP

Category File Transfer

Security Risk Critical

Port Range Well-Known (0-1023)

What is Port 21?

FTP control channel. Handles authentication, directory listing commands, and file transfer negotiation. Sends usernames and passwords in plaintext.

TCP File Transfer Commonly Used

Security Considerations

Port 21 (FTP Control) is classified as critical risk. This port should not be exposed to the public internet. The service transmits data without encryption, making it vulnerable to eavesdropping, credential theft, and man-in-the-middle attacks.

Recommendation: Block this port at the firewall. Use encrypted alternatives (SSH, SFTP, HTTPS) instead.

Related Ports — File Transfer

20 FTP Data 59 Private File Service 69 TFTP 82 XFER Utility 97 Swift-RVF 115 SFTP (Simple FTP) 117 UUCP Path 139 NetBIOS Session

Related Terms

ARP FTP HTTP ICMP IMAP NTP