Where FileZilla stores your login information

FileZilla stores usernames and passwords in a file called sitemanager.xml, which lives on your computer rather than in the program itself. When you set up a connection to an FTP or SFTP server in FileZilla, the program saves those details locally so you don't have to type them every time. The location of this file depends on your operating system.

On Windows, the file is usually at C:\Users\[YourUsername]\AppData\Roaming\FileZilla\sitemanager.xml. On Mac, it's in ~/Library/process Support/FileZilla/sitemanager.xml. On Linux, it's typically at ~/.config/FileZilla/sitemanager.xml. You can also find this file by opening FileZilla, going to Edit > Preferences (or FileZilla > Preferences on Mac), then clicking File in the left panel to see the exact path on your system.

Key Takeaways

  • FileZilla stores saved connection details in a file called sitemanager.xml that you can locate and open with a text editor.
  • The file location varies by operating system: Windows uses AppData\Roaming, Mac uses Library/process Support, and Linux uses .config.
  • You can view saved usernames and passwords by opening sitemanager.xml in Notepad, TextEdit, or any plain-text editor.
  • If you've forgotten a password, you can retrieve it from this file, but you cannot change it within FileZilla—you must change it on the actual server.

How to view saved usernames in FileZilla

The easiest way to see what usernames you've saved is to open FileZilla and look at the Site Manager. Click File > Site Manager (or press Ctrl+S on Windows/Linux, Cmd+S on Mac). This window shows every FTP and SFTP connection you've set up. Click on any site name in the left panel, and the right side displays the host address, port number, and username you saved for that connection.

If you want to see the actual password stored for a site, FileZilla does not display it in the Site Manager by default—it shows only dots or a blank field for security. To see the password itself, you need to open the sitemanager.xml file directly in a text editor. Right-click the file, select Open with, and choose Notepad (Windows), TextEdit (Mac), or any text editor. Search for the site name or username, and you'll find the password stored in plain text nearby in the XML structure.

Retrieving a forgotten password from the file

If you've forgotten the password for a server you've connected to before, opening sitemanager.xml is the fastest way to recover it. Locate the file using the path for your operating system, open it in a text editor, and search for the server name or username. The password appears in the XML as a value between tags—look for a line that contains <Pass> followed by your password and </Pass>.

Keep in mind that this password is stored on your computer in plain text, which is why FileZilla warns you to protect your computer from unauthorized access. If someone gains access to your computer, they can read all your saved FTP passwords from this file. For this reason, many people choose not to save passwords in FileZilla at all and instead type them each time they connect.

Why FileZilla doesn't encrypt saved passwords

FileZilla stores passwords in plain text rather than encrypted form, which makes them straightforward to read but also straightforward to steal if someone accesses your computer. This is a known limitation of the program and a deliberate choice by the developers. Other FTP clients like Cyberduck or WinSCP encrypt saved passwords, making them unreadable without the program's master password.

If you're concerned about security, you have two options: either don't save passwords in FileZilla at all, or use a password manager like Bitwarden, 1Password, or KeePass to store your FTP credentials instead. A password manager encrypts your passwords and requires a master password to unlock them, which is much safer than storing them in plain text on your hard drive.

Changing a password you've saved in FileZilla

FileZilla itself does not have a way to change a saved password within the program. If you need to update a password, you must change it on the actual FTP or SFTP server first, then update it in FileZilla. To do this, open the Site Manager, find the connection, and edit the password field with the new one.

If you've changed your server password but forgotten to update FileZilla, you'll get a login error the next time you try to connect. When that happens, open the Site Manager again, click on the site, and type the new password into the password field. FileZilla will then save the updated password to sitemanager.xml.

Finding your username if you only have the password

If you have the password but can't remember the username, opening sitemanager.xml will show you both. Search the file for the password you remember, and the username will appear nearby in the XML structure, usually in a line marked <User>. This is useful if you've set up multiple connections and can't remember which username goes with which server.

Alternatively, if you're still logged into a server in FileZilla, you can see the username in the title bar at the top of the window or in the transfer log at the bottom, which shows messages like "User [username] logged in" when the connection was established.

Frequently Asked Questions

Can I see my FileZilla password without opening the XML file?

FileZilla's Site Manager hides passwords by default for security. To see them, you must open the sitemanager.xml file in a text editor. There is no built-in way to display saved passwords within the FileZilla program itself.

What if I can't find the sitemanager.xml file?

Make sure you're looking in the correct folder for your operating system. On Windows, you may need to enable viewing hidden files first—go to View in File Explorer and check "Hidden items". On Mac and Linux, hidden folders starting with a dot (like .config) are hidden by default; use Cmd+Shift+. on Mac or ls -la in the terminal on Linux to show them.

Is it safe to store passwords in FileZilla?

FileZilla stores passwords in plain text, so anyone with access to your computer can read them from the sitemanager.xml file. It's safer to use a password manager or to not save passwords at all and type them each time you connect.

Can I export my FileZilla passwords to use them elsewhere?

Yes—you can copy the usernames and passwords from sitemanager.xml and paste them into a password manager or another FTP client. However, be careful when handling the file, since it contains all your server credentials in plain text.

What happens if I delete sitemanager.xml?

FileZilla will create a new empty sitemanager.xml file the next time you save a connection. All your saved sites and passwords will be lost, so you'll need to set them up again from scratch.