J-Unleashed!

On databases, programming and more

Poderosa – A Viable PuTTY Replacement

Posted by Joe on April 4, 2009

I’m a long-time PuTTY user, but one of the annoyances is that it does not save passwords. I understand the reasoning behind why, but the creators of PuTTY took the stance of never going to add that as a feature. I found a decent replacement that does have password saving capabilities, and that is Poderosa. Poderosa is an open-source, free SSH tool with tabs, split window panes, and yes, password saving capabilities. It’s written in C# and built on the .NET 2.0 platform. A lot of people don’t like that fact, but .NET is so standard on Windows nowadays that it’s really no big deal.

I searched for quite awhile for how to have the passwords saved. Nothing I tried worked, so having the source code was useful. I ran the system through my Visual Studio debugger and found out exactly how the passwords are read in from the XML-based shortcut file. There is a configuration setting inside Poderosa that is turned off by default. Click on the “Tools” menu, then “Detailed preferences editor…”. Find the setting named “org.poderosa.protocols.ReadSerializedPasswords” and change it to “true”. Then, in the shortcut file (these have the extension “.gts”) in the second element, next to the “account” attribute, create a new attribute named “passphrase” and add your password there. Here’s what it might look like.

<?xml version="1.0" encoding="Windows-1252"?>
<poderosa-shortcut version="4.0">
  <Poderosa.Terminal.TerminalSettings encoding="iso-8859-1" caption="Remove Server Name Goes Here" />
  <Poderosa.Protocols.SSHLoginParameter destination="127.0.0.1" account="joe" passphrase="myTotallyUnsecurePassword" />
</poderosa-shortcut>

Obviously, you would have the destination equal the IP address of the remote server.

Now, before you go all nuts about clear text passwords, let me just say that I agree with you 100% that passwords in clear text are a bad, bad, bad idea. Since I have the source code, I will be working on a way to have passwords saved in a different, more secured fashion, but for the moment, this meets my needs. Perhaps it will meet your needs, too.

4 Responses to “Poderosa – A Viable PuTTY Replacement”

  1. jboadas said

    Very Useful information, I already manage to autologin using public keys in putty but I think that the old fine putty deserve a re-desing. very thanks

  2. C said

    Well poderosa’s development seems to have halted 3 years ago. It’s hardly a viable replacement for anything I guess…

  3. Iain said

    Hey Joe,

    Great post, much easier getting through the day with saved passwords.
    If you ever get it developed, I’d love to see the function (i have alot of passwords i dont want to type!!)

  4. Stein said

    Not a good sollution.
    Combine Putty with KeePass and the Auto-Type feature in KeePass instead.

Leave a Reply

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>