Encrypt passwords using OTP

When you connect to a site you can encrypt your password to protect it from interception using the One Time Password (OTP) scheme.  OTP is supported by GlobalSCAPE Secure FTP Server, various *nix servers, and a few Windows' based servers as well.

To enable OTP for a standard FTP site

1. Click the Site Manager tab.

2. Highlight a site.

3. On the menu bar click File > Properties.

4. Click the Type tab

5. In Protocol type, make sure FTP (standard File Transfer Protocol) is selected.

6. Select an encryption method in the Password Protection group. Choose from:

• Not Encrypted

• MD4

• MD5

• Auto detect OTP

7. Click Connect or OK.

To enable OTP for an FTP over SSL site

1. Click the Site Manager tab.

2. Highlight a site.

3. On the menu bar click File > Properties.

4. Click the Type tab

5. In Protocol type, make sure FTP (standard File Transfer Protocol) is selected.

6. Select an encryption method in the Password Protection group. Choose from:

• Not Encrypted

• MD4

• MD5

• Auto detect OTP

7. In Protocol type, select the desired SSL connection mechanism.

8. Click Connect or OK.

Note

Using OTP with SSL adds a redundant layer of protection as SSL authentication already protects the password using a robust encryption mechanism.

Note

OTP is defined in RFC 1938 (replaced by 2289) and was evolved from S/KEY™, a One-Time Password System originally developed by Bellcore.

Encryption Options

Not Encrypted - the password is sent unprotected to the server.

MD4 (S/Key) - A system that encrypts your password a different way every time it is sent.

MD5 (S/Key) - The same system as MD4, with more complex encryption scheme.

Auto detect OTP - CuteFTP tries to detect the encryption method the server uses.