1"use strict";(self.webpackChunkdocs=self.webpackChunkdocs||[]).push([["3462"],{35297(e,t,s){s.r(t),s.d(t,{metadata:()=>r,default:()=>u,frontMatter:()=>o,contentTitle:()=>d,toc:()=>i,assets:()=>p});var r=JSON.parse('{"id":"updraftplus/cloud-storage/ftp-fstp/ftp-password-storage-explained","title":"Why FTP and SFTP passwords aren\u2019t encrypted","description":"Learn why FTP and SFTP passwords aren\u2019t encrypted in UpdraftPlus and what this means for security.","source":"@site/markdown/docs/updraftplus/cloud-storage/ftp-fstp/ftp-password-storage-explained.md","sourceDirName":"updraftplus/cloud-storage/ftp-fstp","slug":"/updraftplus/cloud-storage/ftp-fstp/ftp-password-storage-explained","permalink":"/docs/updraftplus/cloud-storage/ftp-fstp/ftp-password-storage-explained","draft":false,"unlisted":false,"tags":[],"version":"current","frontMatter":{"title":"Why FTP and SFTP passwords aren\u2019t encrypted","description":"Learn why FTP and SFTP passwords aren\u2019t encrypted in UpdraftPlus and what this means for security."},"sidebar":"updraftPlus","previous":{"title":"What to do if your FTP credentials aren\u2019t working","permalink":"/docs/updraftplus/cloud-storage/ftp-fstp/ftp-credentials-not-working"},"next":{"title":"Why FTP stopped working after upgrading to Premium","permalink":"/docs/updraftplus/cloud-storage/ftp-fstp/ftp-stopped-working-after-premium-upgrade"}}'),a=s(74848),n=s(28453);let o={title:"Why FTP and SFTP passwords aren\u2019t encrypted",description:"Learn why FTP and SFTP passwords aren\u2019t encrypted in UpdraftPlus and what this means for security."},d="Why FTP and SFTP passwords aren\u2019t encrypted",p={},i=[{value:"But doesn\u2019t encrypting the password provide an extra level of security?",id:"but-doesnt-encrypting-the-password-provide-an-extra-level-of-security",level:2}];function c(e){let t={h1:"h1",h2:"h2",header:"header",p:"p",...(0,n.R)(),...e.components};return(0,a.jsxs)(a.Fragment,{children:[(0,a.jsx)(t.header,{children:(0,a.jsx)(t.h1,{id:"why-ftp-and-sftp-passwords-arent-encrypted",children:"Why FTP and SFTP passwords aren\u2019t encrypted"})}),"\n",(0,a.jsx)(t.p,{children:"In order to upload backups to your server via SFTP or FTP, a security token is required to give the plugin access. In the case of FTP, this is a password, while SFTP can use a password or security key. To allow the plugin to access the server unattended, this password is stored in the WP database."}),"\n",(0,a.jsx)(t.p,{children:"Due to how the FTP and SFTP protocols use and send passwords, this cannot be stored using one-way encryption like the WordPress password."}),"\n",(0,a.jsx)(t.p,{children:"In this situation, UpdraftPlus does not encrypt the password in the database, as this would be redundant. The only persons who should have access to your WP database are yourself and any trusted administrators."}),"\n",(0,a.jsx)(t.h2,{id:"but-doesnt-encrypting-the-password-provide-an-extra-level-of-security",children:"But doesn\u2019t encrypting the password provide an extra level of security?"}),"\n",(0,a.jsx)(t.p,{children:"There are two methods by which an attacker or other malicious individual could gain access to the database, and therefore the password."}),"\n",(0,a.jsx)(t.p,{children:"If they have accessed the database via the backups stored in your FTP/SFTP server, then apparently they already have access to your password or another method of accessing the server, thus reading the password from the database would be redundant."}),"\n",(0,a.jsx)(t.p,{children:"If they instead have access to the live database, then they have complete access to your site and data, including any encryption scheme which could be used to encrypt the FTP password."}),"\n",(0,a.jsx)(t.p,{children:"As such, encrypting the FTP/SFTP credentials in the database would not provide any real additional security. It is instead better to keep strong user passwords and up-to-date security plugins for the site."})]})}function u(e={}){let{wrapper:t}={...(0,n.R)(),...e.components};return t?(0,a.jsx)(t,{...e,children:(0,a.jsx)(c,{...e})}):c(e)}},28453(e,t,s){s.d(t,{R:()=>o,x:()=>d});var r=s(96540);let a={},n=r.createContext(a);function o(e){let t=r.useContext(n);return r.useMemo(function(){return"function"==typeof e?e(t):{...t,...e}},[t,e])}function d(e){let t;return t=e.disableParentContext?"function"==typeof e.components?e.components(a):e.components||a:o(e.components),r.createElement(n.Provider,{value:t},e.children)}}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.