Secure FTP

[leporello]

Can anyone recommend a secure FTP client?

I've been using FileZilla until I recently found that the passwords are stored as plain text in an unecrypted file on the desktop. From reading about a ittle bit, it appears that most of the popular FTP tools have similar security flaws.

50% of my wp sites have been hacked recently and support have said that it's due to a local trojan that is stealing ftp details.

[Student]

I use smart FTP

[Unknown Webmaster]

I'm using WinSCP at the moment - I don't know how it compares to other FTP clients, but it allow you to encrypt the file that contains the stored login information using AES.

If you select the "commander interface" it has a look and feel that isn't too far from that of Filezilla, with the exception that you have to enter your master password before you get access to the stored login information.

You enable login encryption by going tor Options>Preferences>Security and selecting a master password.

(you have to log in to one of your sites before you can access the preferences)

[leporello]

I'm using WinSCP at the moment - I don't know how it compares to other FTP clients, but it allow you to encrypt the file that contains the stored login information using AES.

If you select the "commander interface" it has a look and feel that isn't too far from that of Filezilla, with the exception that you have to enter your master password before you get access to the stored login information.

You enable login encryption by going tor Options>Preferences>Security and selecting a master password.

(you have to log in to one of your sites before you can access the preferences)

Thanks man. Really appreciate that.

[LadyHoldem]

I use smart FTP

Ditto.

[leporello]

I'm using WinSCP at the moment - I don't know how it compares to other FTP clients, but it allow you to encrypt the file that contains the stored login information using AES.

If you select the "commander interface" it has a look and feel that isn't too far from that of Filezilla, with the exception that you have to enter your master password before you get access to the stored login information.

You enable login encryption by going tor Options>Preferences>Security and selecting a master password.

(you have to log in to one of your sites before you can access the preferences)

once i've set the master, when does it actually ask for me to input it? it's yet to ask for it.

Also, I believe smartftp has some big security hole in it too.

[Tim]

I've been using FileZilla until I recently found that the passwords are stored as plain text in an unecrypted file on the desktop. From reading about a ittle bit, it appears that most of the popular FTP tools have similar security flaws.

I didn't know this, and I've been using FileZilla lately, after years using WS_FTP Pro. If what you say is true, it's very worrying.

[CasinoMack]

FireFTP inside Firefox works for me.

[leporello]

I didn't know this, and I've been using FileZilla lately, after years using WS_FTP Pro. If what you say is true, it's very worrying.

Yep. it stores it as plain text in a local file. Many trojans steal this data which is why alot of sites get hacked. The makers of filezilla have still not encrypted it in spite of numerous requests from the users. I was actually shocked when i opened the file and saw all my ftp passwords just sitting ther ein my plain text.

[Michael Martinez]

coreFTP has options you can set to tell it to NOT encrypt passwords (so it does that by default) and to NOT save passwords (which it does by default).

However, there is at least one utility out there that claims it can recover coreFTP passwords.

Still, I use it and like it.