A new pop-up box will prompt you to type your chosen password phrase.
The master password encrypts all saved site passwords (and private key passphrases) stored in WinSCP’s configuration file. Without it, WinSCP cannot autofill credentials for saved sessions. winscp master password
Anyone with access to your machine can instantly reveal the plain-text passwords using simple GitHub open-source recovery scripts . A new pop-up box will prompt you to
When you save a profile inside WinSCP and check the "Save password" box, the application saves your secret key to either the Windows Registry or a local WinSCP.ini file. Without a master password enabled: Anyone with access to your machine can instantly
If WinSCP is currently open (or was open recently) and you have unlocked a session:
Enable master password + set a timeout to lock after 15–30 minutes of inactivity (available under Preferences > Security).