Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

A number of non-technical users currently manage secure data with FileZilla on Windows. The SFTP credentials are broadly shared in the organization as a result.

I would like to centrally manage credentials so that users cannot directly view them. With FileZilla, the credentials are stored in a non-encrypted file, Settings.xml.

Is there an approach using any user-friendly, Windows SFTP client to centrally manage SFTP credentials and prevent users from directly having access to the credentials?

share|improve this question
add comment

2 Answers 2

up vote 19 down vote accepted

Don't use passwords. Use SSH Keys.

With SSH Keys, each user has his own private key(s) which are shared with no one. On each server+account for which you want to grant that user access, you add the key signature to the authorized_keys file. If you ever want to revoke access, you remove that user from the file. You can also specify restrictions on what each user (i.e. each key) can do, so if you log in with a given key certain limitations apply.

share|improve this answer
add comment

Use 2 step authentication with google-authenticator. It can used with PAM so when connecting one have to enter password and a token generated by they mobile phones.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.