Filezilla malware password#

Filezilla malware password#

So despite loving FileZilla® I switched to WinSCP which has master password support. While I can see his point, the harder I make it for hackers the better as far as I am concerned. Unfortunately the author of FileZilla® refuses to add this feature, insisting that it is the responsibility of the OS to protect your files. This way if someone gets a hold of your password file they won't be able to read it without the master password.Īdding master password functionality is the #1 requested feature for FileZilla®. What could be done to prevent this? Other programs that save sensitive information like Firefox, Chrome, Bitcoin, and others use a master password to encrypt and protect your information. All it took was for me was to visit a website that had been compromised, the malware got into my system through some sort of browser exploit, and within seconds someone somewhere suddenly had access to all of my websites.Īfter spending almost a week trying to clean up this mess I was determined to never let this happen again. I soon discovered that FileZilla® was storing all my passwords in a plain text file on my computer, and knowing this, malware authors and hackers are targeting this file. Plus it saved all my logins and passwords for me which made managing the dozens of sites I looked after much much easier.Įverything was fine for years until one day all of the websites I managed were hacked, filled with malware, and blacklisted from Google on the same day.

I've been a web developer for a while now and like most web developers I use FTP, a lot. Now Filezilla® has also decided to support encrypted passwords. Why FileZilla Secure? tl dr at the time I started this project, FileZilla® did not encrypt saved FTP passwords and I got hacked, so I decided to implement it on own.