Retrieve Passwords
Moderator: Project members
-
- 500 Command not understood
- Posts: 3
- Joined: 2011-10-05 19:19
- First name: Nancy
- Last name: Planek
Retrieve Passwords
Is there anyway to retrieve the login and password information for all my firezilla logins. We are using much more now and I didn't keep track, now I need to.
Re: Retrieve Passwords
FileZilla
Using the client or the server?
Client: Simply export (File menu) the sites into an XML file.
Server: All account information is stored in the FileZilla Server.xml file, except the passwords. The server never stores passwords, only their MD5 hashes.
Using the client or the server?
Client: Simply export (File menu) the sites into an XML file.
Server: All account information is stored in the FileZilla Server.xml file, except the passwords. The server never stores passwords, only their MD5 hashes.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
-
- 500 Command not understood
- Posts: 3
- Joined: 2011-10-05 19:19
- First name: Nancy
- Last name: Planek
Re: Retrieve Passwords
It would be the server, and I guess I'm out of luck since there's no way to retrieve the password.
Re: Retrieve Passwords
Please contact your server administrator to recover from lost login credentials.
Re: Retrieve Passwords
@botg: From her first post, she is using FileZilla Server and the server admin.
Yes, FileZilla Server doesn't save any passwords, only the MD5 hash (that's all it needs). By the way, this is the reason for all passwords getting equal length after having been entered. Since hashing is a one-way lossy operation, there would be only one way to determine potential password candidates - searching for so called collisions (source strings producing exact that hash) via brute force methods. MD5 is not collision resistant, so there may be more than one password working for a FileZilla Server account. However, actually finding the original password or one of the alternate strings has a very low chance and is very time consuming. In other words: Not worth the hassle. So I fear the best way would be to issue new ones.
@botg: Would change the hash to SHA512 be overkill? Plain MD5 is a bit weak, would need at least some salting...
Yes, FileZilla Server doesn't save any passwords, only the MD5 hash (that's all it needs). By the way, this is the reason for all passwords getting equal length after having been entered. Since hashing is a one-way lossy operation, there would be only one way to determine potential password candidates - searching for so called collisions (source strings producing exact that hash) via brute force methods. MD5 is not collision resistant, so there may be more than one password working for a FileZilla Server account. However, actually finding the original password or one of the alternate strings has a very low chance and is very time consuming. In other words: Not worth the hassle. So I fear the best way would be to issue new ones.
@botg: Would change the hash to SHA512 be overkill? Plain MD5 is a bit weak, would need at least some salting...
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
Re: Retrieve Passwords
@boco: Not when I originally started my previous reply, the other replies were not yet there. Regarding SHA512, I think it would be overkill. After all, nobody should have access to the settings file in the first place.
- Hugh_K
- 550 Permission denied
- Posts: 26
- Joined: 2011-03-12 12:33
- First name: Hugh
- Last name: Kallen
- Location: Michigan, USA
Re: Retrieve Passwords
This was exactly what I needed for one of our newer websites. Thank you!boco wrote:Client: Simply export (File menu) the sites into an XML file.
Last edited by boco on 2014-07-17 01:13, edited 1 time in total.
Reason: Please don't post URLs. it's against the rules.
Reason: Please don't post URLs. it's against the rules.