How to Recover Saved FileZilla Passwords
FileZilla saves FTP and SFTP credentials automatically so you don't have to type them every time. But if you've ever needed to move to a new PC, reinstall Windows, or just retrieve a password you never wrote down, those saved credentials can feel locked away. This guide shows you exactly how to get them back.
FileZilla stores saved site passwords in a local XML file. Older versions stored them in plain text; newer versions use base64 encoding. Either way, the passwords are fully recoverable using the methods below.
Quick Answer
Download SterJo FileZilla Decryptor, run it, and all your saved FTP site passwords appear immediately — no technical steps required. Or open your sitemanager.xml file manually to find base64-encoded passwords you can decode online.
📖 In This Guide
Method 1: SterJo FileZilla Decryptor (Easiest)
SterJo FileZilla Decryptor reads FileZilla's configuration files directly and displays all saved site credentials in plain text — no manual file editing, no base64 decoding, no command line.
📁 SterJo FileZilla Decryptor
Free • Portable • No installation required
- Recovers all saved FTP, FTPS, and SFTP passwords from FileZilla
- Reads both sitemanager.xml and recentservers.xml
- Shows site name, hostname, port, username, and password
- Export results to text or HTML
- Works on Windows 7 through Windows 11
How to Use SterJo FileZilla Decryptor
- Download and run SterJo FileZilla Decryptor — no installation needed.
- The tool automatically locates FileZilla's configuration files from the default AppData path.
- All saved sites appear with their credentials listed in plain text.
- Click File → Save to export the list to a file for safe keeping.
Method 2: Read sitemanager.xml Manually
If you prefer not to use a tool, you can open FileZilla's configuration file directly. This is especially useful for older FileZilla versions which stored passwords as plain base64.
Step 1: Find the sitemanager.xml File
FileZilla stores its site manager data in your Windows user profile. The default location is:
C:\Users\[YourUsername]\AppData\Roaming\FileZilla\sitemanager.xml
If you can't see the AppData folder, press Windows + R, type %appdata%\FileZilla, and press Enter. This opens the folder directly.
Step 2: Open the File
Right-click sitemanager.xml and open it with Notepad or any text editor. You'll see XML entries for each saved site. Look for a <Pass> or <Password> tag inside each site entry.
Step 3: Decode the Password
In newer FileZilla versions, the password value is base64 encoded. Copy the value between the password tags and paste it into a base64 decoder (search "base64 decode" in any browser) to get the plain text password.
In older FileZilla versions (before 3.x), the password may already be in plain text inside the XML file.
⚠️ Note: FileZilla version 3.28 and later can optionally encrypt the master password protecting your site manager. If you enabled a master password, the XML approach won't work — use SterJo FileZilla Decryptor instead, which handles the decryption automatically.
Where FileZilla Stores Passwords
FileZilla Client uses two files to store credentials:
| File | Contents | Location |
|---|---|---|
| sitemanager.xml | All manually saved FTP sites from Site Manager | %AppData%\FileZilla\ |
| recentservers.xml | Recently connected servers (Quickconnect history) | %AppData%\FileZilla\ |
SterJo FileZilla Decryptor reads both files automatically. If you're using the manual XML method, check both files — servers you connected to via the Quickconnect bar appear in recentservers.xml, not sitemanager.xml.
How to Back Up FileZilla Before Reinstalling Windows
If you're about to reinstall Windows and want to preserve all your FileZilla sites and passwords, the easiest approach is to copy the entire FileZilla AppData folder:
- Press Windows + R and type
%appdata%\FileZilla, then press Enter. - Copy the entire FileZilla folder to a USB drive or external storage.
- After reinstalling Windows and FileZilla, paste the folder back to the same AppData location.
- Open FileZilla — all your saved sites and passwords will be restored exactly as before.
Alternatively, use SterJo FileZilla Decryptor to export your passwords to a readable text file first. This is more useful if you're migrating to a different FTP client entirely.
📚 Related Guides
Back Up All Passwords Before Reinstalling
FileZilla is just one part of a complete pre-reinstall password backup. See the full checklist.
Recover Chrome Passwords
Also need to recover browser passwords? This guide covers Chrome step by step.
Frequently Asked Questions
Why does FileZilla warn that storing passwords is insecure?
FileZilla displays this warning because it stores passwords in a local XML file that any program with access to your user profile can read. It's a transparency notice, not an error. For improved security, FileZilla offers a master password option (in Edit → Settings → Interface) that encrypts the stored credentials.
Can I recover FileZilla passwords if the PC won't boot?
Yes, as long as the hard drive is intact. Connect the drive to another Windows PC, navigate to the original drive's Users\[Username]\AppData\Roaming\FileZilla\ folder, and copy the sitemanager.xml file. Then use SterJo FileZilla Decryptor on the new PC to read the credentials from that file.
Does SterJo FileZilla Decryptor work with FileZilla Server (not just Client)?
SterJo FileZilla Decryptor is designed for FileZilla Client — the application you use to connect to FTP servers. FileZilla Server stores user account data separately in its own configuration, which is a different format and not covered by this tool.
I enabled a FileZilla master password — can I still recover my passwords?
If you remember the master password, you can disable it in FileZilla's settings (Edit → Settings → Interface → Master password), which decrypts and saves the credentials back in the standard format. SterJo FileZilla Decryptor can then read them normally. If you've forgotten the master password, recovery is not possible without it.
Is recovering my own FileZilla passwords legal?
Yes. Recovering passwords from your own FileZilla installation is perfectly legal. These tools are intended for users who have forgotten their own credentials, not for accessing other people's FTP servers.
Recover Your FTP Passwords in Seconds
Whether you're moving to a new PC, recovering from a crash, or just need a password you stored years ago, SterJo FileZilla Decryptor gives you instant access to everything FileZilla has saved. Run it, export the list, and you have a permanent, readable record of all your FTP credentials.
📋 Popular Guides
- FTPRecover FileZilla Passwords
- ChromeRecover Chrome Passwords
- Wi-FiFind Saved Wi-Fi Password
- PasswordsBack Up Before Reinstall
💡 Quick Tip
Before reinstalling Windows, copy your entire %AppData%\FileZilla folder to a USB drive. Paste it back after reinstalling to restore all your saved sites instantly.