FTP layer is a major security hole in Joomla. In most cases, the FTP layer is not needed in Joomla and it comes disabled by default. If you enable FTP layer for any reason, we recommend it to disable right after use. You can enable or disable the FTP layer from Global Configuration under the server tab.