Editing FileZilla (section)

===Plain text password storage===
Until version 3.26 FileZilla stored all saved usernames and passwords as plain text, allowing any malware that had gained even limited access to the user's system to read the data. FileZilla author Tim Kosse was reluctant to add encrypted storage. He stated that it gives a false sense of security, since well-crafted malware can include a [[keylogger]] that reads the master password used to secure the data. Users have argued that reading the master password to decrypt the encrypted storage is still harder than just reading the unencrypted storage.<ref>{{cite web|title=Missing password feature now poses a serious security threat|url=https://forum.filezilla-project.org/viewtopic.php?f=2&t=31521|website=Filezilla forums|access-date=29 May 2017}}</ref> A [[Fork (software development)|fork]] called ''FileZilla Secure'' was started in November 2016 to add encrypted storage.<ref>{{cite web|url=http://www.filezillasecure.com/|title=FileZilla Secure - Dedicated to keeping your FTP passwords secure.|last=FileZillaSecure|work=filezillasecure.com|access-date=23 November 2016}}</ref> In May 2017, encrypted storage was also added to the main version, 10 years after it was first requested.<ref>{{cite web|last1=Cimpanu|first1=Catalin|title=FileZilla FTP Client Adds Support for Master Password That Encrypts Your Logins|url=https://www.bleepingcomputer.com/news/software/filezilla-ftp-client-adds-support-for-master-password-that-encrypts-your-logins/|website=Bleeping Computer|date=26 May 2017|access-date=29 May 2017}}</ref> Kosse maintained that the feature did not really increase security, as long as the operating system is not secure.<ref>{{cite web|title=FileZilla 3 development diary|url=https://forum.filezilla-project.org/viewtopic.php?p=156130#p156130|access-date=29 May 2017}}</ref>