Page 1 of 1

FTP Passwords as cleartext/way to decrypt them

Posted: 17 Jul 2007, 11:57
by bernie79
hello,

is there a way to store ftp/winscp passwords as cleartext, and if not, is it possible to decrypt it? i wonder, if it is not absolutely secure, why don't we have the choice to save them unencrypted?

i think, this decision should be up to the user, don't you?

best regards,
bernie

Posted: 17 Jul 2007, 12:13
by Petr Solin
FTP/WinSCP passwords can be decrypted easily. Contact me on my email (petr.solin at altap.cz), I'll send you small utilities for decrypting.

EDIT: Since version 2.52 beta 2 you can use Ctrl+right click in Password edit box to show password as clear text. It's recommended to use Master Password (see menu Options/Configuration/Security/Use Master Password) because you must enter it before a password is shown (as a protection before unauthorized use).

Posted: 08 Jan 2008, 14:49
by TApok
I am agree with bernie79. Checkbox "Show password" is useful when creating new FTP connection. I have some FTP connections but I can't move them to another computer or share with friend because I forgot all passwords.

Posted: 10 Jan 2008, 11:05
by KNUT
Petr Solin wrote:FTP/WinSCP passwords can be decrypted easily. Contact me on my email (petr.solin at altap.cz), I'll send you small utilities for decrypting.
x-pass!? :wink:

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 24 Aug 2009, 16:16
by Petr Solin
Since version 2.52 beta 2 you can use Ctrl+right click in Password edit box to show password as clear text. It's recommended to use Master Password (see menu Options/Configuration/Security/Use Master Password) because you must enter it before a password is shown (as a protection before unauthorized use).

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 17 Mar 2010, 19:03
by roman2
Petr Solin wrote:Since version 2.52 beta 2 you can use Ctrl+right click in Password edit box to show password as clear text.
This doesn't work in 2.52 or 2.53 beta 1, and I need to recall my passwords.

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 17 Mar 2010, 19:10
by Raptor
roman2 wrote:This doesn't work in 2.52 or 2.53 beta 1, and I need to recall my passwords.
It works fine - use Ctrl+Right click. But using MessageBox to show password is not the best idea. You are not able to copy password to clipboard etc.

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 17 Mar 2010, 19:11
by Jan Rysavy
Use Ctrl+C to copy any message box content to the clipboard.

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 17 Mar 2010, 19:39
by roman2
Ah, I missed the Ctrl part of the instruction :) It works now. Thank you.

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 17 Mar 2010, 19:44
by Raptor
Jan Rysavy wrote:Use Ctrl+C to copy any message box content to the clipboard.
Yes, and for example paste whole dialog to another ftp client text edit, right? Not the best solution ;-)

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 17 Mar 2010, 20:49
by therube

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 17 Mar 2010, 22:55
by Petr Solin
Raptor wrote:Yes, and for example paste whole dialog to another ftp client text edit, right? Not the best solution ;-)
I have changed OK to Yes+No buttons, click Yes to copy password to clipboard. I believe it's OK now. Thanks for idea. It will be available in final version 2.53.

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 18 Mar 2010, 08:08
by Raptor
IMHO the best solution from FlashFXP ftp client:
img.png
img.png (6.41 KiB) Viewed 18154 times
Just one click to reveal and standard copy/paste prom edit. No more dialogs etc.

Re: FTP Passwords as cleartext/way to decrypt them

Posted: 19 Mar 2010, 09:46
by Ether
Raptor wrote:Just one click to reveal and standard copy/paste prom edit. No more dialogs etc.
In this case, I have to agree. I understand that Ctrl+RMB is not a common shortcut, so it's acting as a defense against random people discovering your passwords everytime you go away from the computer for 30 seconds. But I think that a show/hide button like the one mentioned by Raptor is just better to use.