FTP is inherently insecure, everything is transmitted in plaintext. Because the server cannot check a password against a hash (due to the limitations of FTP), the client needs to store the password, and can&#x27;t keep only a hash.<p>That being said, Base64 is woefully inadequate, just google &#x27;base64 decode&#x27;; and this response (from someone who appears to be a contributor) is just not a defence.