Filezilla keeps all passwords in plain text file.

You can view the files in the path below (for windows)

Windows XP/2K:
“C:\Documents and Settings\username\Application Data\FileZilla”

Windows Vista/Windows 7:
“C:\Users\username\AppData\Roaming\FileZilla\”

Linux: “/home/username/.filezilla/”

This is how the recentservers.xml that keep the recent connection looks like

<!--?xml version="1.0" encoding="UTF-8" standalone="yes" ?-->
 
 
 
            yourhost.com
            21
            0
            0
            your_username
            your_password
            1
            0
            MODE_DEFAULT
            0
            Auto
            0

To secure your password,

1. Never save any password to your hosting. At most you can only save the username.

2. Clear the private data everytime before close the Filezilla application

Choose Edit > Clear private data..

Choose the first 2 options and click OK