Master password for duplicate/open session in new window

Advertisement

Ricardo
Donor
Ricardo avatar
Joined:
Posts:
107

Master password for duplicate/open session in new window

When using option to duplicate or open session in new window, master password is asked.
Is it intended behavior?

Reply with quote

Advertisement

martin
Site Admin
martin avatar
Joined:
Posts:
40,476
Location:
Prague, Czechia

Re: Master password for duplicate/open session in new window

I suppose you have the master password function enabled, don't you? Than it is (kind of) intended. When opening session in new window, it actually runs another instance of WinSCP. So it asks for master password again. I could somehow transfer the password to the second instance. Will see if it bothers more people :)

Reply with quote

Ricardo
Donor
Ricardo avatar

Thanks!
It is like the same as opening a session in Putty, where it sends the password automatically and don't ask for it.
Maybe if you add a command-line option to receive session password...

Reply with quote

martin
Site Admin
martin avatar
Joined:
Posts:
40,476
Location:
Prague, Czechia

Ricardo wrote:

Thanks!
It is like the same as opening a session in Putty, where it sends the password automatically and don't ask for it.
Maybe if you add a command-line option to receive session password...
I've thought we talk about master password, not session password. Problem with passing password on command-line is that it is easy to retrieve the command-line used to execute any process. So it is not particularly safe. When passing session password to PuTTY, I guess it is obvious for security-concerned users that it is happening, so they can asses the risk. When opening WinSCP session in new window, I guess most people do not realize that new instance of WinSCP is started, so they may not be aware of the risk. Moreover, we should protect master password much more then session passwords.

Reply with quote

Advertisement

You can post new topics in this forum