arnley

If you are a frequent user of FileZilla and use it for accessing remote FTP servers, you may have saved your credentials once for all in its “Sites manager”.

But what if you don’t remember your password?

Well, you’re in luck, since its encryption is weak and can be hacked quite easily, in these two steps:

1. First, find the XML file in which credentials are stored (C:\Program Files\FileZilla\FileZilla.xml) and copy the “Pass” value of the forgotten account
2. Paste it in the below input field, then click on the “Recover” button
3. Your original password will be revealed instantly!

Thanks to Graham Nott for his post on this specific subject. His approach in dealing with the decryption part was server-side, but I prefered doing it client-side, with Javascript, for the sake of my hosting provider!