If you can open WinSCP but want to see the actual passwords for the sites:
Encrypted password repository with a master password - WinSCP
Would you like a quick step-by-step on how to set it up securely? winscp master password
Once set, WinSCP will ask for the master password the first time it needs to access a protected session in a new instance.
. By default, WinSCP stores your remote server passwords in an easily decryptable format. This leaves them highly vulnerable to malicious software, credential-stealing trojans, or unauthorized local users. Activating a master password forces WinSCP to request a single, primary key the first time an instance needs to decrypt your saved profiles. Why You Must Use a Master Password If you can open WinSCP but want to
What is the specific roadblock you are hitting right now? (e.g., Is the prompt appearing on startup? Are you trying to move to a new computer?)
Enter a complex sequence, confirm it in the validation field, and press . By default, WinSCP stores your remote server passwords
Once activated, WinSCP changes how it interacts with memory:
Automated info-stealer malware targeting Windows environments specifically searches registry keys for these unprotected credentials.
Confusing, but fixable.