🔒 Secure, client-side decryption for FileZilla SiteManager exports.
FileZilla stores passwords securely using X25519 key exchange and AES-GCM encryption (if you set a master password). This tool allows you to decrypt your exported sitemanager.xml file directly in your browser without installing FileZilla.
- ⚡ 100% Client-Side: Uses WebCrypto API & TweetNaCl.js. Your data never leaves your device.
- 🌍 Bilingual: English & German support.
- 🗝️ Secure: Supports the latest FileZilla hybrid encryption logic.
- 📱 Responsive: Works on Desktop and Mobile.
- 🔍 Searchable: Quickly find specific server credentials.
- Open FileZilla.
- Go to
File->Export.... - Check "Export Site Manager entries" and save the XML file.
- Drop the file into the Web Tool.
- Enter your Master Password if prompted.
If you cannot open FileZilla (e.g., after a system crash), you can find the sitemanager.xml file here:
| OS | Path |
|---|---|
| Windows | %APPDATA%\FileZilla\sitemanager.xml (Paste this into the Explorer address bar) |
| Linux | ~/.config/filezilla/sitemanager.xml (or ~/.filezilla/sitemanager.xml on older systems) |
| macOS | ~/.config/filezilla/sitemanager.xml |
Note: You can also use
recentservers.xmlif you just want to recover quick-connect entries.
- Zero Knowledge: This tool runs entirely in your browser. No data is sent to any server (Google Analytics or similar trackers are NOT included).
- Open Source: You can inspect the source code in this repository.
- Offline Capable: You can clone this repo and run the
index.htmllocally (requires a local server like VS Code "Live Server" due to WebCrypto security restrictions in browsers).
- Crypto: TweetNaCl.js + Native WebCrypto API
- UI: Tailwind CSS
- Icons: Lucide
MIT