Where are my credentials?

Security and Credentials

Your real FTP login lives in SyncNow's cloud vault, and nothing else holds the full secret.

When you add a project, SyncNow needs your FTP host, username and password so it can watch your site. The authoritative copy of those credentials stays server-side in the vault, where the cloud executor uses them to do the real FTP work. They never leave the vault.

On your own PC, a copy of the password may be kept so the app can reconnect, but it is encrypted with Windows DPAPI and tied to your Windows user account, not saved in plain text.

What about an AI assistant?

An assistant never receives your real FTP password. It works through SyncNow's local proxy using a one-time key, while the vaulted credentials stay in the cloud. So your password is not sitting in a file or pasted into a chat: it is vaulted in the cloud and DPAPI-protected on disk.

Related Docs
Getting Started
Collaboration
Updates
Troubleshooting
AI Assistants and the FTP Proxy
Discipline and Trust
How Observation Works
Safety Guards
Security and Credentials
Work Sessions and Grants