Understand sFTP and SSH key login
sFTP (Secure File Transfer Protocol) is the network protocol Billtrust uses for securely transferring large files and sensitive data. It is an extension of Secure Shell (SSH) and supports both password-based and SSH key-based authentication.
Invoicing FTP hosts
Use the following FTP hosts for Invoicing file transfers:
- Production: ftp.billtrust.com
- Testing (UAT): ftp-uat.billtrust.com
Setting up sFTP
Use your existing login credentials (username, password, and hostname) and ensure port 22 is configured for sFTP connections. Verify that neither your network nor firewall is blocking sFTP access.
If everything appears correct on the sending side but you are still unable to connect, open a support case with Billtrust Customer Support to check whether your outbound public IP address is on Billtrust's restricted IP list.
Switch to SSH key login
To stop using a username and password and authenticate with an SSH key instead, open a case with Billtrust Customer Support. SSH key authentication provides a more secure alternative to password-based login.
sFTP FAQs
Q: Is the IP address for caftp.billtrust.com static or subject to change?
A: The IP address (13.64.54.158) is static. You can confidently add it to your firewall rules. Note: caftp.billtrust.com is the Cash Application FTP host - the Invoicing hosts are ftp.billtrust.com (production) and ftp-uat.billtrust.com (testing).
Q: What SHA standards does ftp.billtrust.com use?
A: As of March 2026, Billtrust uses the SHA-2 signature in production. Automated sFTP jobs created before March 2026 may fail with host key-verification errors until your system accepts the new SHA-2 key.
Q: Can I manually add Billtrust's SHA-2 key ahead of time?
A: No - Billtrust cannot provide the key in advance.
Need help?
Contact Billtrust Support through the Support Portal for assistance with sFTP setup, SSH key configuration, or connection issues.