The way SSH private key password stored is not secure. It's only encoded in base64 and saved (not encrypted) in the .ffs_gui file.
I strongly recommend users not to save your private key password. Re-enter it everytime instead.
I hope this issue will be fixed soon.
Cheers,
Emre TURE
SECURITY ISSUE: SSH private key password
- Posts: 1
- Joined: 3 Dec 2016
- Site Admin
- Posts: 7211
- Joined: 9 Dec 2007
You can use the standard FTP syntax with FreeFileSync, i.e.
and enter the password directly into the folder input field before starting sync.
sftp://username:password@yourserver.com/foldername|keyfile=c:\mykeyfile