Adobe Analytics FTP/SFTP security update: What do I actually need to do?
Adobe recently informed customers about a required security measure affecting FTP/SFTP access in Adobe Analytics. It stems from an information disclosure vulnerability Adobe identified, which may have affected some of the hashed credentials used by the Adobe FTP/SFTP service.
Adobe says there's currently no sign that these credentials have been misused. Even so, you should update your passwords as a precaution.
Find out where you use FTP/SFTP in Adobe Analytics
In many organizations, Adobe FTP/SFTP accounts have been in place for years and aren't always easy to spot. So the first step is to get an overview of where they're actually used.
Common places FTP/SFTP shows up:
- Classification Importer (SAINT/Classifications):
Check under Admin > Classification Importer > Import File > FTP Import.
- Data Feeds:
Check under Admin > Data Feeds (select Report Suites & click the "Info" icon).
- Data Sources: Check under: Admin > All Admin > Data sources (select a Report Suite & check the host details under "FTP Info")
- Data Warehouse Exports:
Check under Components > Locations (Location accounts)
- DB Vista Integrations:
There's no overview available in the user interface. You'll need to request your existing Vista Rules directly from Adobe Customer Care.
Depending on your implementation, FTP/SFTP credentials might also be used in automated processes, ETL pipelines, or external integrations. If you're not sure which FTP/SFTP accounts are currently in use, we recommend requesting an overview directly from Adobe Customer Care (especially for DB Vista Integrations).
Check whether you're using Adobe-hosted FTP servers
The password rotation requirement only applies to FTP/SFTP servers hosted by Adobe, such as:
- ftp.omniture.com
- ftp2.omniture.com
Customer-managed FTP or SFTP servers are not affected.
This wasn't entirely clear in Adobe's initial communication, so we contacted Adobe Customer Support for clarification and received confirmation that only Adobe-hosted FTP/SFTP accounts are affected.
Update your password
If you're using an Adobe-hosted FTP/SFTP account, open a ticket with Adobe Customer Care as soon as possible to get a new password.
After that, update every system, application, script, and process that relies on this account.
Still on FTP? Plan a move to SFTP
Adobe also strongly recommends migrating existing FTP connections to SFTP. SFTP provides encrypted communication and is far more secure than traditional FTP.
As Adobe plans to deprecate its FTP service in the future, it makes sense to handle the migration while you're already rotating passwords.
One more thing for Classification imports
If you still rely on FTP/SFTP-based SAINT or Classification imports, note that Adobe will end support for these integrations at the end of August 2026.
That makes now a good time to plan your move to Classification Sets, Adobe's recommended approach going forward.
Our top tip: Get to know Classification Sets in Adobe Analytics
Want to dig deeper? We have an on-demand video where our FELD M colleague Eliot Jones explains how Classification Sets work and how to get real value from them in your Adobe Analytics setup.
In 25 minutes, you'll learn:
- How Classification Sets work,
- How they differ from the old classification system
- And how to set up your classifications so they stay maintainable and analyzable in the long run.
Watch it on demand now: Demystifying Classification Sets in Adobe Analytics
Psst: more on that soon in our Adobe newsletter!
Share this