FTP/SFTP Credential Handling

FTP / FTPS

STORAGE DEFAULT: Servers (vault layout is user-organized; if not found there, use search_entries) TITLE FORMAT: FTP - REQUIRED FIELDS: username, password, url (host), port (if non-standard) NOTES FIELD: protocol variant and lftp connection string

PROTOCOL VARIANTS:

• FTPS explicit: ftp+tls://user@host
• FTPS implicit: ftps://user@host
• Plain FTP: ftp://user@host <- SECURITY VIOLATION, see rule below

PLAIN FTP RULE: If the entry uses plain unencrypted FTP (no TLS), you MUST:

1. Flag this as a security concern to the user before storing
2. Require the user to provide a written explanation in the notes field
3. Do not store the entry without this note present