Sunday, June 7, 2009

How to make store ftp passwords securely in filezilla

Filezilla which I use for ftp has the problem that saves the ftp passwords in plain text in windows.

If someone searches a bit, they can very easily see all the passwords for all the ftp locations you have stored to your computer.

In my windows pcs, to avoid prying eyes I am using an encrypted hard disc software (like pgpdisk or truecrypt). For various reasons I dont want to encrypt my whole disk, but I want to create a "hidden" disk, which I mount only when I want.

So, I wanted to put my ftp sites details (address/username/password) in the encrypted disk, and not where by default they were saved by filezilla.

The way to do this, is by editing a file called fzdefaults.xml which lives in the directory your filezilla gets executed (usually: "C:\Program Files\FileZilla FTP Client" )

At the end of the file there is a line like:
some location

You change this setting to the location you want, and thats it.

In my case, if someone opens filezilla without me having mounted the encrypted disk first, they just see an empty list of sites. They dont even know that I have an encrypted list.

No comments:

Post a Comment