Most security alerts about FileZilla are false positives. Antivirus programs often tag FileZilla as a Potentially Unwanted Application (PUA) due to offers bundled during installation.
The FileZilla project relies on sponsors to support its development and maintenance costs, and as a result, the installer may include bundled offers. These offers are presented as optional installations during the setup process, and users have the choice to accept or decline them. When present, bundled offers are vetted, premium products — for example, the Google Chrome browser.
To ensure a secure installation of FileZilla without encountering bundled offers, you can follow these steps:
- Download from the Official Website:
Obtain the FileZilla installer directly from the official website (https://filezilla-project.org/). This ensures that you are getting the authentic, untampered version of the software:These versions are available on the official website, ensuring a straightforward and secure installation process.
- Carefully Review the Installation Process:
During installation, pay close attention to the prompts and checkboxes. If you’re not interested in any optional offers or additional software, simply decline them to proceed with the core FileZilla installation. - Verify the Source:
Verify the authenticity of the installer by checking the digital signature. The official FileZilla installer is signed to confirm its legitimacy. Below is a step-by-step guide on how to check the digital signature:- Download FileZilla from the official website.
- Right-click the installer, select “Properties.”
- Go to the “Digital Signatures” tab.
- Check for a signature from “FileZilla Project” or a legitimate entity.
- Click “Details” to view certificate information.
- Confirm the certificate is valid and issued to “FileZilla Project.”
- Verify the certificate chain in the “Certificate Path” tab.
- No warnings or errors should be present.
- Install only if confident in the authenticity of the digital signature.
Note: if you find a false positive, contact your AV vendor to report it. There is no virus in the offer-enabled installer.
FileZilla is a reliable and secure file transfer solution when obtained from the official source — and since we take security very seriously, we have run a Bug Bounty programme for years, addressing only a few minor issues, always promptly.
FileZilla Documentation & User Guides
New to FileZilla? The official FileZilla documentation and user guides cover everything from first-time installation and site manager setup to transfer queue management, connection troubleshooting, and advanced configuration.
Need Cloud Storage Support? Meet FileZilla Pro
The standard FileZilla client handles FTP, SFTP, and FTPS. FileZilla Pro extends that foundation with native support for all major cloud storage protocols — including Amazon S3, Google Drive, Microsoft OneDrive, Dropbox, Box, Azure Blob Storage, Google Cloud Storage, and Backblaze B2. You get the same familiar FileZilla interface, with the ability to connect directly to cloud platforms and transfer files across them without any additional tools. See what FileZilla Pro adds over the standard client →
FileZilla Pro installs without security warnings
FileZilla Pro is distributed as a clean installer with no bundled software, optional offers, or third-party add-ons. Because it contains nothing beyond the application itself, antivirus and endpoint security tools do not classify it as a Potentially Unwanted Application (PUA) — so you get a smooth, warning-free installation every time.