Sftp - use BOTH key and password

[hellfire]

Hi!

is it not possible to use BOTH key and password when connecting to a site?
I can't seem to get it to work, I can add both, but according to the SFTP log is total commander only sending the key...
because these days it almost necessary to use 2 verifications..

[ghisler(Author)]

Unfortunately my plugin only supports login via key OR password, not both. The stored password is used to decrypt the key.

[hellfire]

Ok, pitty, well, thx anyway!

[ghisler(Author)]

I have put it on my to do list, e.g. by making the password field multi-line, or adding a second password field.

[hellfire]

oh, so the password under the key is the keys password if a key is used?

yeah, possibility to use both key and a password (not key password), can be useful..
Because a key or a password can be misplaced, but both a key and a password, then you shouldn't be allowed to use a computer

[Horst.Epp]

oh, so the password under the key is the keys password if a key is used?

yeah, possibility to use both key and a password (not key password), can be useful..
Because a key or a password can be misplaced, but both a key and a password, then you shouldn't be allowed to use a computer

Its absolute unusual to use password and keyfile for sftp logins.
A keyfile already has a password and the remote host is configured to accept the key as login.
Adding an additional password maks no sense.

[hellfire]

unusual

Yepp, that's me, minimum 64chars password and a 4kkey, at least for me...

[ghisler(Author)]

A keyfile already has a password and the remote host is configured to accept the key as login.

I agree, as long as you store your key encrypted, there is no benefit of an extra password:
1. You need something you have (the key)
2. You need something you know (the password for that key)
If your device is compromised and a key logger is installed, they can steal both your key password and site password.