Page 1 of 1

Sftp - use BOTH key and password

Posted: 2022-01-07, 09:11 UTC
by hellfire
Hi!

is it not possible to use BOTH key and password when connecting to a site?
I can't seem to get it to work, I can add both, but according to the SFTP log is total commander only sending the key...
because these days it almost necessary to use 2 verifications..

Re: Sftp - use BOTH key and password

Posted: 2022-01-07, 14:50 UTC
by ghisler(Author)
Unfortunately my plugin only supports login via key OR password, not both. The stored password is used to decrypt the key.

Re: Sftp - use BOTH key and password

Posted: 2022-01-07, 18:32 UTC
by hellfire
Ok, pitty, well, thx anyway! :D

Re: Sftp - use BOTH key and password

Posted: 2022-01-10, 08:54 UTC
by ghisler(Author)
I have put it on my to do list, e.g. by making the password field multi-line, or adding a second password field.

Re: Sftp - use BOTH key and password

Posted: 2022-01-10, 14:00 UTC
by hellfire
oh, so the password under the key is the keys password if a key is used?

yeah, possibility to use both key and a password (not key password), can be useful..
Because a key or a password can be misplaced, but both a key and a password, then you shouldn't be allowed to use a computer 😄

Re: Sftp - use BOTH key and password

Posted: 2022-01-10, 14:41 UTC
by Horst.Epp
hellfire wrote: ↑2022-01-10, 14:00 UTC oh, so the password under the key is the keys password if a key is used?

yeah, possibility to use both key and a password (not key password), can be useful..
Because a key or a password can be misplaced, but both a key and a password, then you shouldn't be allowed to use a computer 😄
Its absolute unusual to use password and keyfile for sftp logins.
A keyfile already has a password and the remote host is configured to accept the key as login.
Adding an additional password maks no sense.

Re: Sftp - use BOTH key and password

Posted: 2022-01-10, 18:54 UTC
by hellfire
Horst.Epp wrote: ↑2022-01-10, 14:41 UTC unusual
Yepp, that's me, minimum 64chars password and a 4kkey, at least for me... :roll:

Re: Sftp - use BOTH key and password

Posted: 2022-01-11, 07:54 UTC
by ghisler(Author)
A keyfile already has a password and the remote host is configured to accept the key as login.
I agree, as long as you store your key encrypted, there is no benefit of an extra password:
1. You need something you have (the key)
2. You need something you know (the password for that key)
If your device is compromised and a key logger is installed, they can steal both your key password and site password.