Re: Generate session URL/code decode password to plain text
Without a master password, passwords are not protected (cannot be). They can be retrieved anytime. The "generate code" functionality makes it only bit easier. But that's actually a plus, as it makes it clear to everyone that the passwords are not protected.
See also
https://winscp.net/eng/docs/security_credentials
https://winscp.net/eng/docs/faq_password
ok. Thank you