What version? Under what circumstances does it happen?
                
            
        
    
    
        
        
            
            
                This is a new problem. In older versions of WinSCP, name and/or password were only saved if user did so explicitly. Since using newer versions of WinSCP user name and password get saved automatically. This is a serious bug for people using WinSCP in an open environment such as a PC-Pool or Internet-Café.
Yours,
Dave