Hi
I'm using FreeFileSync a lot as a donation user, to synchronize my different computers.
But I have a major problem with sftp connections : the password is recorded in the freefilesync configuration file. It's a major safety issue for me since connecting my computer is done from my mail account... I already don't like to talk about that here.
Isn't it possible to hide the passwords behind a general password (Thunderbird and Firefox style) or to allow an "ask for password before each session" mode (FileZilla style) ? I've not seen the option.
Thanks
Hiding the password for cloud synchronization
- Posts: 5
- Joined: 24 Aug 2022
-
- Posts: 2615
- Joined: 22 Aug 2012
Can't you define and store your password for your sftp network location in the Credential Manager (assuming Windows)?
Then your password is stored in an encrypted form.
Alternatively:
What happens when you remove the password from the saved configuration file and save it like that?
I would guess the system (either FFS or the OS) will then prompt you for the password.
Then your password is stored in an encrypted form.
Alternatively:
What happens when you remove the password from the saved configuration file and save it like that?
I would guess the system (either FFS or the OS) will then prompt you for the password.
- Posts: 5
- Joined: 24 Aug 2022
Hi ! Thanks for your answer, yes I'm on Windows 10.
I don't have any credential manager on my computers, and I'd rather not install a new application for that (I don't really like the idea yet).
And more importantly, if I remove the password, it is not prompted, the synchronization just fails :
- Unable to find the following folders: "blablabla" LIBSSH2_ERROR_AUTHENTICATION_FAILED.
Therefore it knows the password (left blank) is not good, but it still doesn't ask for it. I'm not sure, would a credential manager catch this ?
I don't have any credential manager on my computers, and I'd rather not install a new application for that (I don't really like the idea yet).
And more importantly, if I remove the password, it is not prompted, the synchronization just fails :
- Unable to find the following folders: "blablabla" LIBSSH2_ERROR_AUTHENTICATION_FAILED.
Therefore it knows the password (left blank) is not good, but it still doesn't ask for it. I'm not sure, would a credential manager catch this ?
-
- Posts: 2615
- Joined: 22 Aug 2012
> ... I'm on Windows 10. I don't have any credential manager on my computers, ...
The Credential Manager is an integral part of Windows already for many generations of the OS. So, it must be on your system.
Assuming an English Windows version, simply type "Credential Manager" in your search field (the looking glass right next to your Windows Start-icon) and define a user+password for the root IP or URL of your sftp location.
After doing so, you may need to newly create (and safe) your FFS sync configuration.
The Credential Manager is an integral part of Windows already for many generations of the OS. So, it must be on your system.
Assuming an English Windows version, simply type "Credential Manager" in your search field (the looking glass right next to your Windows Start-icon) and define a user+password for the root IP or URL of your sftp location.
After doing so, you may need to newly create (and safe) your FFS sync configuration.
- Posts: 5
- Joined: 24 Aug 2022
Yes it's "Gestionnaire d'identification" in french. I added my local IP, in two ways:
sftp://IP.IP.IP.IP/
and IP.IP.IP.IP/
both with my login (user@mail.fr)
and password
It seems to have no effect !
And for "Password", "Key file" and "Pageant" (?) authentication.
sftp://IP.IP.IP.IP/
and IP.IP.IP.IP/
both with my login (user@mail.fr)
and password
It seems to have no effect !
And for "Password", "Key file" and "Pageant" (?) authentication.
- Posts: 5
- Joined: 24 Aug 2022
Just to be sure, have you tried your solution ?
Is it just me ?
Does anyone has another one ?
Is it just me ?
Does anyone has another one ?
- Posts: 3
- Joined: 14 Apr 2022
Hi, you're not alone in asking for this change (see this thread - started in 2019).
In lieu of the current application failure, it should prompt you for a password if one isn't provided within the configuration settings/file. Another example to possibly look at is WinSCP and how they handle this issue. Other workarounds, IMHO, seem like overkill for such a fundamental simple issue.
In lieu of the current application failure, it should prompt you for a password if one isn't provided within the configuration settings/file. Another example to possibly look at is WinSCP and how they handle this issue. Other workarounds, IMHO, seem like overkill for such a fundamental simple issue.
-
- Site Admin
- Posts: 7357
- Joined: 9 Dec 2007
Implemented for the next release!
FreeFileSync 12.0
-----------------
Don't save password and show prompt instead for (S)FTP
- Posts: 7
- Joined: 29 Aug 2023
Is this feature request still open? I'm interested in making a donation, but my impediment is the fact that I don't have a password so they can't browse my Gdrive folders.Implemented for the next release!Zenju, 19 Jan 2023, 20:09FreeFileSync 12.0
-----------------
Don't save password and show prompt instead for (S)FTP
- Posts: 5
- Joined: 24 Aug 2022
Tried it today in 13.8 (why did I wait sooo long after your answer ^^ ? I don't know) and it works perfectly !Implemented for the next release!Zenju, 19 Jan 2023, 20:09FreeFileSync 12.0
-----------------
Don't save password and show prompt instead for (S)FTP
It is for me the solution since I have only one server and thus one password to enter.
Thanks, this avoids me to install another app. Sorry LeoW I did not took time to install Rclone, but I'll keep the app in mind. I hope this will help other person with the need !
