Security of logging, how to upgrade securely?

I have to upgrade over untrusted network. As I understand secure winbox and SSH is secure, but FTP doesn’t.

I shouldn’t use admin account for FTP. I want to create restricted user for FTP only. If I create new user what rights he must have to upload FTP files? Do I have to change package attributes after uploading?

You could just drag-and-drop the new packages files from your Windows Explorer into the “Files” window in WinBox - this will upload (securely) through WinBox.

Best regards,
Christian Meis