911 posts Never trust a ballerina with a moustache
  • 3 Years of Membership
  • Australia
  • Blog Interview
  • Collector Level 3
+6 more
Carmen
says

Hi everyone, Just letting you know we’re going to be deploying a change that means authors using FTP will only be able to login (to FTP) using their API key (currently it’s password OR API key).

When the change goes out, we’ve changed the FTP program to say; “login incorrect. Passwords are no longer accepted to authenticate via FTP, please use your API key instead. You can read more about the API here.

FAQs
Do I have generate my API key first? Yes you’ll have to generate one, you can find how how here.

What happens if I revoke that one and then re-generate another? If you revoke an API key then you will have to update the FTP program with an active API key

What if they have multiple API Keys? You can use any of your active API keys.

41 posts
  • Affiliate Level 1
  • Author Level 3
  • Collector Level 1
  • Indonesia
+2 more
Jakartanese
says

I just curious and don’t know technical consideration behind this. :) Is it more more confidential password than API? Because we only use password to access Envato’s site, and sometimes we easily give our API key to any 3rd party, such as application even that is not Envato’s official.

734 posts
  • Beta Tester
  • 3 Years of Membership
  • Author Level 6
  • Affiliate Level 1
+2 more
billyf
says

I just curious and don’t know technical consideration behind this. :) Is it more more confidential password than API? Because we only use password to access Envato’s site, and sometimes we easily give our API key to any 3rd party, such as application even that is not Envato’s official.
In that case, you should generate a new API key which is meant specifically for your FTP only ;)
2792 posts Bird is the word..
  • Top Monthly Author
  • Trendsetter
  • Weekly Top Seller
  • United States
+11 more
jonathan01
says

At this time of the year may i suggest that a message is placed on authors dashboards or send out an email as many will not see this message and you will then receive a flood of posts no doubt in the new year asking why their FTP uploads are not working.

Just a suggestion.

Jonathan

5467 posts The Dude Abides
  • Top Monthly Author
  • Trendsetter
  • Weekly Top Seller
  • United States
+13 more
CodingJack
says

I just curious and don’t know technical consideration behind this. :) Is it more more confidential password than API? Because we only use password to access Envato’s site, and sometimes we easily give our API key to any 3rd party, such as application even that is not Envato’s official.

Even with this change I think it’s still ok. Because even if someone used your API key + ftp, all they can really do is upload something to your account storage. They’d still have to have your password to apply that to an official upload/update.

41 posts
  • Affiliate Level 1
  • Author Level 3
  • Collector Level 1
  • Indonesia
+2 more
Jakartanese
says

+1 for Jonathan’s suggestion.

41 posts
  • Affiliate Level 1
  • Author Level 3
  • Collector Level 1
  • Indonesia
+2 more
Jakartanese
says

In that case, you should generate a new API key which is meant specifically for your FTP only ;)

Even with this change I think it’s still ok. Because even if someone used your API key + ftp, all they can really do is upload something to your account storage. They’d still have to have your password to apply that to an official upload/update.

Yes, never think about that, haha. Thank you billyf & CodingJack.

51 posts BD Themes
  • Author Level 8
  • Collector Level 3
  • Affiliate Level 6
  • Beta Tester
+6 more
bdthemes
says

Thanks for this information :)

1162 posts
  • Weekly Top Seller
  • Featured Author
  • Front Page Master
  • Most Wanted Winner
+10 more
RafaelOliveira
says

Thx for the info :)

2527 posts
  • 5 Years of Membership
  • Affiliate Level 2
  • Author Level 6
  • Beta Tester
+13 more
urbazon
says


I just curious and don’t know technical consideration behind this. :) Is it more more confidential password than API? Because we only use password to access Envato’s site, and sometimes we easily give our API key to any 3rd party, such as application even that is not Envato’s official.
In that case, you should generate a new API key which is meant specifically for your FTP only ;)

It actually doesn’t matter, because they said any API key can be used to log in into ftp accout ;)

But, on the other hand, CodingJack is right, the only bad thing that can happen is that somebody logs into your ftp account and uploads something to it. They can’t download anything, nor can they do anything with the uploaded files afterwards. But still, I wouldn’t like somebody messing with my ftp account. :)

by
by
by
by
by
by