SECURITY ISSUE: SSH private key password

Discuss new features and functions
Posts: 1
Joined: 3 Dec 2016

emreture

The way SSH private key password stored is not secure. It's only encoded in base64 and saved (not encrypted) in the .ffs_gui file.

I strongly recommend users not to save your private key password. Re-enter it everytime instead.

I hope this issue will be fixed soon.

Cheers,
Emre TURE
User avatar
Site Admin
Posts: 7058
Joined: 9 Dec 2007

Zenju

You can use the standard FTP syntax with FreeFileSync, i.e.
sftp://username:password@yourserver.com/foldername|keyfile=c:\mykeyfile
and enter the password directly into the folder input field before starting sync.