When you save a profile inside WinSCP and check the "Save password" box, the application saves your secret key to either the Windows Registry or a local WinSCP.ini file. Without a master password enabled:
You must manually delete the Security configuration section in your Windows Registry or configuration file. winscp master password
Bleak.
I understand. You’ve likely forgotten it, or you’re trying to recover a saved session, and you’re realizing that WinSCP’s security is doing exactly what it’s designed to do: keep people out. When you save a profile inside WinSCP and
Here’s a good review of the feature, focusing on its security, usability, and practical value for regular users. focusing on its security