FileZilla is a cross platform Open Source FTP client for uploading files to web server. It is one of most used FTP client.
It stores password in XML files in its config directory.

Follow these instructions to recover saved password in FileZilla.

These instructions are applicable in windows. I’ve tested them on windows 7 and windows 8.

Filezilla saves password in 2 files named  sitemanager.xml and recentservers.xml.  Sitemanager.xml saves password and other details of ftp accounts which are configured through site manager in filezilla. Recentservers.xml saved password saved in quick connect box.

These two files are located in “AppData”  folder. To find this location go to

C:/(drive name in which windows is installed)  => Users  => Gyan(Windows username)  => AppData => Roaming  => FileZilla

so in my case it is: C:\Users\is14\AppData\Roaming\FileZilla

Open these two files in any text editor to view ftp account details.

Once you open one of the file it has  following code blocks. Host (between Host tag) ,username (between User tag) and password (between Pass tag) are clearly visible for a ftp account.

This is an example of the RecentServers.xml file:

<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<FileZilla3>
    <RecentServers>
        <Server>
            <Host>192.168.99.101</Host>
            <Port>21</Port>
            <Protocol>0</Protocol>
            <Type>0</Type>
            <User>piero</User>
            <Pass>test</Pass>
            <Logontype>1</Logontype>
            <TimezoneOffset>0</TimezoneOffset>
            <PasvMode>MODE_DEFAULT</PasvMode>
            <MaximumMultipleConnections>0</MaximumMultipleConnections>
            <EncodingType>Auto</EncodingType>
            <BypassProxy>0</BypassProxy>
        </Server>
    </RecentServers>
</FileZilla3>

It can happen the password is saved here but the password is saved after an encoding.

If you password looks like this:

<Pass encoding="base64">dGVzdA==</Pass>

you will have to decode it to recover you pass. You can use this online tool to encode/decode string with base64.

Note: AppData folder is hidden by default.Enable show folder in folder option to view it.

Just a tip now: if you want to check how to import and/or export your site list, just click here.

Advertisements