FileZilla

4.0 stars

"FileZilla and plain-text passwords"

December 3, 2013  |   By bizzeebeever

Version: FileZilla 3.7.3

Pros

Filezilla does what it advertises: it is an FTP client which can handle multiple sessions and transfers.

The default view, with directory trees for both local and remote folders, is a bit cluttered, but you can get rid of them by deselecting them in the View menu.

Cons

I can't think of any.

Summary

For the person before me who blames FileZilla for his "cracked" server: the computer which contains FileZilla's plain-text password file has to be compromised FIRST in order for an attacker to read it. If someone hacked your server after stealing your password, it is *YOUR* fault for not having proper security on your personal computer, not FileZilla's. Well, to be more accurate, it's much more your fault than FileZilla's.

The fact is, almost all modern *browsers* have issues with encrypting stored passwords (Firefox encrypts them, but then stores the encryption keys in the same folder *unless you use a master password*; Chrome doesn't encrypt passwords *at all*; IE uses encryption, but then makes the decryption routines available to anyone with access to Google...).

In short... it seems a bit unfair to blame FileZilla for lax password security when most browsers have similar issues--and especially when the makers of Chrome, the most popular browser, *intentionally* do not bother with password storage encryption: http://www.scmagazine.com/chrome-saved-passwords-in-plain-text-not-a-flaw-according-to-google/article/306470/. Your first line of defense is YOU, and YOUR COMPUTER'S security settings.

Reply to this review

Was this review helpful? (0) (0)

1.0 stars

"Stores passwords in plain text - HUGE security hole"

November 2, 2013  |   By KringleClaus

Version: FileZilla 3.7.3

Pros

I love Filezilla - have used it for years except...

Cons

Got a call from webhost that they were taking my site down due to malware that had been uploaded to it (this has happened twice now). Cannot prove it at this point, but the evidence points to Filezilla storing passwords in plain text that any @#$% can grab & use to upload malware to your site. I *really* hope I'm wrong that this simple oversight by Filezilla caused these problems. For more info, check their own support ticket: http://trac.filezilla-project.org/ticket/5530

Summary

Updated on Nov 4, 2013

Don't believe me? Check this out: http://www.hackingarticles.in/how-to-hack-save-password-in-filezilla-of-remote-pc/

As additional proof, I can also provide a malicious file that was uploaded to my server by a hacker -- just hope you can read Chinese!.

Over 3 MILLION websites have been compromised because of this software. Do not become one of them!

DO NOT USE THIS SOFTWARE UNTIL IT IS FIXED!

Reply to this review

Was this review helpful? (0) (0)

5.0 stars

"Been using FileZilla since v2.0. Perfect for basic use."

October 8, 2013  |   By Bubba_Gump

Version: FileZilla 3.7.3

Pros

Biggest "Pro" of all: It's free. It's already a great easy-to-use program that handles basic-to-moderate FTP transfers with ease. Transfer files as simple as "drag n drop". Rename files as easily as if the files were on your local machine.

Little to no overhead, so the program xfers files as fast as your connection allows.

I love the ability to set default directories (both locally and on remote host) so when you connect, you don't have to go looking for your files.

Cons

Can't really name the cons because my own use has always been quite basic and never needed more advanced features.

Summary

Even the old versions worked with every version of Windows (even 64bit Win 7/8).

A simple, easy-to-use File Transfer Protocol program for your PC, allowing you to download files from site archives that allow "anonymous" access (like Microsoft), or allows you to upload files to sites you have access to (like your own website/blog.)

Mimics the standard Windows file explorer interface in ease-of-use so there's almost no learning curve for basic use.

More advanced functions/features are there for those who need them.

Reply to this review

Was this review helpful? (0) (0)

5.0 stars

"I use no other ftp client, this one is best!"

August 19, 2013  |   By Eugenens4512

Version: FileZilla 3.7.3

Pros

Easy to use

Cons

No complaints from me

Reply to this review

Was this review helpful? (0) (0)

5.0 stars

"great as usual"

August 16, 2013  |   By jfc1068

Version: FileZilla 3.7.3

Pros

never disappoints

Cons

nothing I can see

Reply to this review

Was this review helpful? (0) (0)

5.0 stars

"Does everything I want for free!"

August 8, 2013  |   By PixelMetrics

Version: FileZilla 3.7.3

Pros

Works well.

Cons

Can't think of any.

Reply to this review

Was this review helpful? (0) (0)

1.0 stars

"Stores your passwords in Plain Text"

July 31, 2013  |   By flagpole2

Version: FileZilla 3.7.1.1

Pros

All FTP clients are basically the same. This one is no different and is fully featured.

Cons

FileZilla stores your passwords in plain text. This is a serious security vulnerability, meaning if you were ever to get a malware infection there is a good chance you would also lose the passwords to your server.

The developer believes it is your responsibility to secure your operating system and if you get malware then it's not his fault.

Summary

It's just not worth the risk. Use something else.

Reply to this review

Was this review helpful? (0) (0)

5.0 stars

"FileZilla is easy to use and works well"

July 2, 2013  |   By PSSnyder

Version: FileZilla 3.7.1.1

Pros

After trying a lot of website management automated tools I have drifted back to FTP. It is easier to keep up with what is happening when you manually upload files. FileZilla has a good user interface and a reasonable number of bells and whistles. It is one of those programs that you can use without thinking too hard.

Cons

There are a few minor problems that won't affect many users, and room for little improvements - like auto refresh when local files change. Basically it works great.

Reply to this review

Was this review helpful? (0) (0)

1.0 stars

"IFRAME VIRUS"

May 23, 2013  |   By MALWAREREPORT

Version: FileZilla 3.7.0.1

Pros

BEEN USING IT FOR A LONG TIME

Cons

IFRAME VIRUS INJECTION
HACKING

Summary

USE WINSCP INSTEAD

Reply to this review

Was this review helpful? (0) (0)