Xshell session files and security [3]

Hello,

Using Xshell, you can store passwords and passphrases within a session file.

User does not need to enter a master password to decrypt the session files, so this is not cryptography but rather obfuscation.

-What if the session file is stolen?
-What is the obfuscation algorithm?
-Is it possible to have a master password to really encrypt the session passwords?


Program Ver. : Xshell 3

Dear XShell supporters,
please answer this question,
thanks.

-What if the session file is stolen?
Password is encrypted using the special set of keys. This is different for all users and machines. However, for added security, we recommend you to use the Master Password feature which mixes user defined key into the encryption.

-What is the obfuscation algorithm?
It is not obfuscating password. Xshell uses RC4 with SHA256.

-Is it possible to have a master password to really encrypt the session passwords?
Master password will add a new key to the encryption algorithm so it is harder to crack the password when the session is stolen.



---
Technical Support

How about Xshell5?
also uses RC4 with SHA256?