911 posts Never trust a ballerina with a moustache
  • Attended a Community Meetup
  • Australia
  • Bought between 10 and 49 items
  • Contributed a Blog Post
  • Exclusive Author
  • Grew a moustache for the Envato Movember competition
  • Has been a member for 2-3 years
  • Interviewed on the Envato Notes blog
  • Repeatedly Helped protect Envato Marketplaces against copyright violations
+1 more
Carmen says

Hi everyone, Just letting you know we’re going to be deploying a change that means authors using FTP will only be able to login (to FTP) using their API key (currently it’s password OR API key).

When the change goes out, we’ve changed the FTP program to say; “login incorrect. Passwords are no longer accepted to authenticate via FTP, please use your API key instead. You can read more about the API here.

FAQs
Do I have generate my API key first? Yes you’ll have to generate one, you can find how how here.

What happens if I revoke that one and then re-generate another? If you revoke an API key then you will have to update the FTP program with an active API key

What if they have multiple API Keys? You can use any of your active API keys.

41 posts
  • Indonesia
  • Exclusive Author
  • Sold between 1 000 and 5 000 dollars
  • Has been a member for 1-2 years
  • Referred between 1 and 9 users
  • Bought between 1 and 9 items
Jakartanese says

I just curious and don’t know technical consideration behind this. :) Is it more more confidential password than API? Because we only use password to access Envato’s site, and sometimes we easily give our API key to any 3rd party, such as application even that is not Envato’s official.

356 posts
  • Exclusive Author
  • Has been a member for 2-3 years
  • Malaysia
  • Referred between 1 and 9 users
  • Sold between 10 000 and 50 000 dollars
billyf says

I just curious and don’t know technical consideration behind this. :) Is it more more confidential password than API? Because we only use password to access Envato’s site, and sometimes we easily give our API key to any 3rd party, such as application even that is not Envato’s official.
In that case, you should generate a new API key which is meant specifically for your FTP only ;)
2263 posts Bird is the word..
  • Elite Author
  • United States
  • Sold between 250 000 and 1 000 000 dollars
  • Has been a member for 6-7 years
  • Referred between 200 and 499 users
  • Bought between 100 and 499 items
  • Envato Studio (Microlancer) Beta Tester
  • Exclusive Author
+3 more
jonathan01 says

At this time of the year may i suggest that a message is placed on authors dashboards or send out an email as many will not see this message and you will then receive a flood of posts no doubt in the new year asking why their FTP uploads are not working.

Just a suggestion.

Jonathan

5310 posts The Dude Abides
  • United States
  • Exclusive Author
  • Has been a member for 5-6 years
  • Elite Author
  • Bought between 100 and 499 items
  • Referred between 100 and 199 users
  • Author had a Free File of the Month
+5 more
CodingJack says

I just curious and don’t know technical consideration behind this. :) Is it more more confidential password than API? Because we only use password to access Envato’s site, and sometimes we easily give our API key to any 3rd party, such as application even that is not Envato’s official.

Even with this change I think it’s still ok. Because even if someone used your API key + ftp, all they can really do is upload something to your account storage. They’d still have to have your password to apply that to an official upload/update.

41 posts
  • Indonesia
  • Exclusive Author
  • Sold between 1 000 and 5 000 dollars
  • Has been a member for 1-2 years
  • Referred between 1 and 9 users
  • Bought between 1 and 9 items
Jakartanese says

+1 for Jonathan’s suggestion.

41 posts
  • Indonesia
  • Exclusive Author
  • Sold between 1 000 and 5 000 dollars
  • Has been a member for 1-2 years
  • Referred between 1 and 9 users
  • Bought between 1 and 9 items
Jakartanese says

In that case, you should generate a new API key which is meant specifically for your FTP only ;)

Even with this change I think it’s still ok. Because even if someone used your API key + ftp, all they can really do is upload something to your account storage. They’d still have to have your password to apply that to an official upload/update.

Yes, never think about that, haha. Thank you billyf & CodingJack.

40 posts BD Themes
  • Elite Author
  • Bangladesh
  • Exclusive Author
  • Has been a member for 2-3 years
  • Sold between 100 000 and 250 000 dollars
  • Most Wanted Bounty Winner
  • Envato Studio (Microlancer) Beta Tester
  • Bought between 50 and 99 items
  • Referred between 500 and 999 users
bdthemes says

Thanks for this information :)

1155 posts
  • Brazil
  • Sold between 10 000 and 50 000 dollars
  • Repeatedly Helped protect Envato Marketplaces against copyright violations
  • Most Wanted Bounty Winner
  • Envato Studio (Microlancer) Beta Tester
  • Referred between 100 and 199 users
  • Bought between 1 and 9 items
+2 more
RafaelOliveira says

Thx for the info :)

2083 posts
  • Author had a File in an Envato Bundle
  • Contributed a Blog Post
  • Exclusive Author
  • Has been a member for 4-5 years
  • Interviewed on the Envato Notes blog
  • Most Wanted Bounty Winner
  • Referred between 1 and 9 users
  • Serbia
+1 more
urbazon says


I just curious and don’t know technical consideration behind this. :) Is it more more confidential password than API? Because we only use password to access Envato’s site, and sometimes we easily give our API key to any 3rd party, such as application even that is not Envato’s official.
In that case, you should generate a new API key which is meant specifically for your FTP only ;)

It actually doesn’t matter, because they said any API key can be used to log in into ftp accout ;)

But, on the other hand, CodingJack is right, the only bad thing that can happen is that somebody logs into your ftp account and uploads something to it. They can’t download anything, nor can they do anything with the uploaded files afterwards. But still, I wouldn’t like somebody messing with my ftp account. :)

by
by
by
by
by
by