WinSCP does not validate your password. WinSCP is just file transfer client. As such, on beginning of the session, it uses your credentials to authenticate on the server you are connecting to. So it is the server who is rejecting your password. For why that might be hapenning, see documentation for “Access denied” error message.