Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What are the security risks in passing passwords in ftp URLs. For instance internet explorer takes in a url of the form

  1. Is the url transmitted in plain text?
  2. Can a man in the middle (or proxy server) view the request and see the password?
  3. Are there more secure ways/clients that encrypts the password across the wire?
share|improve this question
up vote 2 down vote accepted
  1. Yes
  2. Yes
  3. Yes. Almost all other ways are more secure
    Check out sftp and scp
share|improve this answer
Indeed. Yes, Yes and Yes. And as a fourth point: FTP is bloody annoying on the network. Workarounds (passive mode or a FTP aware firewall) are almost always needed. – Hennes Jul 21 '12 at 14:35
Can you recommend any web hosting company that provides sftp or equivalent? – adentum Jul 21 '12 at 19:48
@adentum - All honourable web hosts with shell/root access should already provide this, if not change web host. – Nifle Jul 21 '12 at 21:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.