Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Where does WinSCP store site's information or password? I can't find it under Documents and Settings...

share|improve this question
I know this solution will be too easy for superusers ;) but if you don't want to get hands dirty or just need to see passwords asap, imho good option is to use smartftp's additional tool password recovery. i don't want to advertise or something, but for me it was really useful utility. btw here is quick tut how to see those passwords: hope i helped – flasherr May 3 '14 at 13:16
up vote 8 down vote accepted

The configuration file is stored either in the Windows registry or, if you are using the portable version, in an INI file. (See the documentation.) The registry location is:

HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2

You can always export the settings to an INI file by pressing Export in the preferences dialog.

Note that your passwords are not stored in text, but encoded. Though difficult to decrypt, it is not impossible.

share|improve this answer
In WinSCP 5.2.x and later the export function has been moved to Tools > Export/Backup Configuration on Login dialog. – Martin Prikryl Nov 21 '13 at 7:35

This is a simplified version of Cesar's excellent answer and assumes your password still works in SCP.

Create a batch file called echo.cmd that contains the following:

echo %*

Place it on a suitable place, such as your desktop.

Fire up WinSCP and connect to your site. Click on Options -> Preferences:

WinSCP Preferences

On the Preferences dialog, go to Integration -> Applications. Replace what was previously in the PuTTY path with the path to your newly created echo.cmd batch file. Also select the option:

Remember session password and pass it to PuTTY (SSH)

WinSCP Putty Preferences

Click OK.

Now launch PuTTY from within WinSCP.

Your previously stored password should now be displayed on the screen!

share|improve this answer
Your trick helped me today. Thanks – Tushar Bhaware Dec 11 '15 at 13:17

Create a new C# console application, then type the following program:

namespace ConsoleApplication8
    class Program
        static void Main(string[] args)
            foreach (var str in args)

If you are not a C# programmer, you can do as easily on any other language you might be familiar with. The point is simply to print whatever values are passed as an argument to your program. You can even do it with a script, if that is more familiar to you.

Now, compile your program, and grab your binary (such as ConsoleApplication8.exe). Place it on a suitable place, such as your desktop.

Now, if your password still works, fire up WinSCP and connect to your site. Click on Options -> Preferences

enter image description here

On the Preferences dialog, go to Integration -> Applications. Replace what was previously in the PuTTY path with the path to your newly created binary. Also select the option "Remember session password and pass it to PuTTY (SSH)".

enter image description here

Click OK, and then try to launch PuTTY from within WinSCP.

Your previously stored password should now be visible in your screen.

share|improve this answer
That's pretty clever! – Paul Lammertsma Feb 4 '14 at 15:29

I had a very weird use case, I needed to recover my password, but my system admins had locked down my environment so I couldn't run any non-whitelisted executable files, and that included .cmd files.

My solution was to instead point the Putty command line to Notepad++.

When it ran it said "File -pw" does not exist, should I create it, you say no.

Then it says "File {the password shows up here} does not exist, should I create it" and again you say now, and bam, there was the password in clear text.

share|improve this answer
Nice trick. I wonder if the command line parameters could also be made visible in, say, Windows Task Manager? (In Unix, running ps would show passwords if those were specified on the command line, also for sub-processes, if they would keep running for some time.) – Arjan Aug 17 '15 at 0:58

You could use a tool like WireShark to "see" what goes on over the wire. What I mean is to have a packet capturing session running (in WireShark) and then login to your FTP server (using WinSCP, with NO encryption).

Then, by looking at the registered session in WireShark, one could easily identify the "discussion" (filtering by the destination IP for example) and then identifying the Request: USER blabla, and then REQUEST: PASS blabla, at the FTP level of the "conversation".

share|improve this answer

I came to this answer while researching a slightly different problem however this was helpful and I wanted to share what I did.

My problem was that I was using WinSCP with passwords saved under Windows XP within an Active Directory domain which then changed. With the new Active Directory domain, my user profile also changed resulting in WinSCP showing no saved logon profiles.

In order to recover the previous WinSCP logon profiles I did the following.

Started up the regedit application and did a search for any keys that had a name of Martin Prikryl. After several false matches, I found the key with what looked to be the correct session data.

I then exported the WinSCP Session registry key using the regedit export command into a text file.

Next I modified the exported text in the text file so that it used HKEY_CURRENT_USER as the beginning of the complete key in front of the Software sub-key

Next using regedit, I imported the data to modify the Windows Registry keys used by WinSCP for the current user.

These actions did the following: (1) found the WinSCP logon Session data for the old user profile, (2) made a copy of that data, (3) modified the Windows Registry key to allow an import with regedit to modify the current user, (4) imported the data modifying the WinSCP registry entries for the current user profile.

After doing this procedure I was able to access my web server with WinSCP.

There are probably a couple of reasons why this was straightforward and worked. First of all this PC was used only by one person so was not shared reducing the false matches. Secondly I had Administrator privileges to the PC. Third this was Windows XP and not Windows 7/8.

share|improve this answer

Try this method.

login into your saved session

go to session menu

click on generate URL

only check username and password options

click on copy to clip board.

it will contain username and password.

thats it.

share|improve this answer
Life saver, I have almost 100 accounts with unknown (saved) passwords. This is what worked for me. – Andy Gee Apr 13 at 18:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.