unmasking passwords in site manager

[DrLightman]

Hello, I need to be able to see the passwords in clear in the Site Manager, it seems I can't find the option to do so, any help?

Thank you

[botg]

There is no such option.

[DrLightman]

Any other way to retrive the passwords stored there?

[boco]

Taking the password strings out of the sitemanager.xml and running them through a base64/radix64 decoder will give the original passwords.

[DrLightman]

ok thanks

(but an option as basic as it should be, it's needed to have the password in clear from inside the program, imho)

[DrLightman]

*bump*

Any hope to see this feature/option added anytime soon?

Thank you

[botg]

There are no such plans.

[DrLightman]

Can you please reconsider adding in this option, default OFF, so to give the user the responsability to show or mask the password? Same responsability the user should have in HIS personal computer about ALL the stuff he runs on it? Also considering that an FTP Client is not a program normally used by totally computer illiterates, in which case I'd maybe understand such a precaution.

It seems dumb to me that I have to go to sitemaneger.xml and do a base 64 decode to get in clear to verify why a password I entered months ago is not working and to have a visual confirmation.

Thank you.

[botg]

The base64 was only added because people kept complaining that it's too easy to recover passwords. I'm not going to change this again, things will stay as they are.

[DrLightman]

And when you thought you finally got rid of me, here I am

You could let the user choose, with an option in Preferences, that would make both world happy and the program flexible. Also, base64encoding it in the xml doesn't make it more secure at all, but I think you well know that. It could make it a lil more secure only to someone passing by my pc and taking a look at the xml database, while I'm at the bathroom, but it never would happen to me because I work at home, alone.

But as you're the boss, I understand the last word is yours.

Meanwhile I'll double store the password in clear in the comment section from now on

[boco]

Also, base64encoding it in the xml doesn't make it more secure at all, but I think you well know that.

Hush! We do know, but those users might not. Don't tell anyone. To the others, please go along, nothing to see here.