Stronger encryption of stored FTP connections
Moderators: Hacker, petermad, Stefan2, white
Stronger encryption of stored FTP connections
I really would like TC to encrypt my FTP passwords with a much more stronger encryption algorithm. Lots of people store their FTP connections but this is VERY DANGEROUS! The encryption is very weak it can be decrypted too easily. Please consider my suggestion as more and more viruses/trojans exploit this and steal passwords from the ftp settings file wcx_ftp.ini.
For instance there is a trojan virus that infects web sites. Once you visit such an infected web site, your computer might be infected (depends on the browser version and operating system). For more information see:
w3net.eu/?p=46
For instance there is a trojan virus that infects web sites. Once you visit such an infected web site, your computer might be infected (depends on the browser version and operating system). For more information see:
w3net.eu/?p=46
- ghisler(Author)
- Site Admin
- Posts: 50475
- Joined: 2003-02-04, 09:46 UTC
- Location: Switzerland
- Contact:
Yes, it's planned, but it will require that the user enters a master password. Why? If Total Commander could decrypt it without asking for a password, then ANY other program could do that too! Btw, Firefox and Internet Explorer do the same as Total Commander, they allow to store your passwords without asking for a master password! There are programs to decrypt these browser passwords out there, so Total Commander is currently not less safe than these browsers.
Once you have a troyan on your PC, it can do almost ANYTHING, even watch the key presses when you type your password (or even master password).
Once you have a troyan on your PC, it can do almost ANYTHING, even watch the key presses when you type your password (or even master password).
Author of Total Commander
https://www.ghisler.com
https://www.ghisler.com
This is exactly what you should do!! This is just MUST HAVE feature. All years I am using TC I worried about FTP passwords and some 'nice' day that happened. All my customers' servers were hacked by fucking russian virus. My F-Secure AV did not help me. I just got trojan from some website. So now I moved to Kaspersky (forewer) and flashfxp (I hope, temporary).. flashfxp is only software I found which uses master pwd to secure this info..ghisler(Author) wrote:but it will require that the user enters a master password.
Please please I hate all others programs to work with ftp.. once that feature will be developed I order one more copy of your cool software.. I promise

- ghisler(Author)
- Site Admin
- Posts: 50475
- Joined: 2003-02-04, 09:46 UTC
- Location: Switzerland
- Contact:
Have you tried the PassStore plugin?
http://www.totalcmd.net/plugring/Pass_Store.html
http://www.totalcmd.net/plugring/Pass_Store.html
Author of Total Commander
https://www.ghisler.com
https://www.ghisler.com
- PeaceMaker
- Senior Member
- Posts: 287
- Joined: 2005-12-31, 22:32 UTC
- Location: Warsaw, Poland
- Contact:
I also store many important FTP passwords in Total Commander (and using them almost every day), so possibility of having stronger encryption (like "master password" feature) would be great! Meanwhile I'm using "PassStore" plugin, which Mr Ghisler proposed in a previous post - it's better than wcx_ftp.inigolovan wrote:This is just MUST HAVE feature. All years I am using TC I worried about FTP passwords and some 'nice' day that happened.

[face=tahoma]LICENSE NUMBER: #101897 Single user license (since: 6th February 2004)
CURRENT VERSION: Total Commander 9.00 beta 12 (released: 31st August 2016)[/face]
CURRENT VERSION: Total Commander 9.00 beta 12 (released: 31st August 2016)[/face]
- ghisler(Author)
- Site Admin
- Posts: 50475
- Joined: 2003-02-04, 09:46 UTC
- Location: Switzerland
- Contact:
Yes, it's planned, but I fear that not many people will really use it. Just a small question: Who is using a master password in Firefox for the Web logins?
Author of Total Commander
https://www.ghisler.com
https://www.ghisler.com
- SanskritFritz
- Power Member
- Posts: 3693
- Joined: 2003-07-24, 09:25 UTC
- Location: Budapest, Hungary