Any password kept on your computer is encrypted with Windows DPAPI, never written in plain text.
DPAPI is the Data Protection API built into Windows. SyncNow uses it at the current-user scope, which means the encryption is tied to your Windows login. Only you, signed in as you on that PC, can decrypt the stored value. Copy the config file to another machine or another account and it simply will not decrypt.
What this means for you
- The stored password lives in your config as an encrypted blob, not readable text.
- You do not handle any encryption key yourself; Windows manages it for your account.
- A stray copy of the config file is not a leak on its own.
This local copy is just a convenience so the app can reconnect. Your real, authoritative FTP credentials still live in the cloud vault. If you ever reset your Windows account and the stored value stops working, just re-enter your FTP password in the project settings and SyncNow re-encrypts it.
SyncNow