Where evoftp stores servers, settings and passwords

evoftp keeps everything it remembers — saved servers, settings and passwords — in one folder on your computer. evoftp password storage is encrypted on Windows and Linux and not encrypted on macOS. Here is where the folder is, what is in it and what that means for you.

Overview: evoftp guide.

Finding the config folder

• Windows — %APPDATA%\evoftp (paste that into the Explorer address bar).
• macOS — ~/Library/Application Support/evoftp (in Finder: Go → Go to Folder…).
• Linux — ~/.config/evoftp.

The folder is created the first time evoftp saves something. It is the same for the portable Windows exe, the macOS app and the Linux AppImage, wherever you keep the program itself.

What is in it

• servers.json — one entry per server in the sidebar: name, host, port, protocol, username, password and start path. For an FTPS server it also holds the SHA-256 fingerprint of the TLS certificate pinned on first connection; that is how evoftp notices a changed certificate, and editing the server and clearing the pinned certificate accepts a new one.
• settings.json — the transfer profile and its sliders, your download folder, the notifications switch and any version you chose to skip in the update dialog.

Both are plain JSON text files, written so that only your user account can read them. Everything else (the transfer list, window size) is not saved between runs.

How the password is protected

• Windows — encrypted with DPAPI, the same mechanism Windows uses for saved browser passwords. It can only be decrypted while you are logged in as the same Windows user on the same machine.
• Linux — encrypted through your desktop keyring (GNOME Keyring, KWallet) via Electron’s safeStorage. If no keyring is running, the password is saved as plain text.
• macOS — not encrypted. The current build is not code-signed, and an unsigned app would trigger a Keychain prompt on every launch, so evoftp does not use the Keychain there. The password sits in servers.json in readable text.

If that bothers you on a Mac, do not save the password: right-click the server → Edit…, clear the password field, and type it each time you connect. Nothing is written to disk in that case.

Note: your .evoftp connection file contains the password too, in plain JSON. Treat it like a password — do not email it or leave it in a shared folder.

Resetting the app

Quit evoftp and delete the config folder. The next launch starts with an empty sidebar and default settings, as if freshly installed. Nothing on your seedbox is affected.

Overview: evoftp guide.