BlazeSCP
Documentation menu

Connecting

SFTP

Connect over SSH with passwords, keys, the SSH agent or two-factor codes.

SFTP is file transfer over SSH, and the best choice for any server you can log into with ssh.

Signing in

Choose Authentication in the server settings:

  • Password: saved in your keychain. If the server only accepts the password through keyboard-interactive login (common with PAM), BlazeSCP handles that automatically.
  • SSH key: point Key file at your private key (default ~/.ssh/id_ed25519). Ed25519, ECDSA and RSA keys work, in OpenSSH or PEM format. If the key has a passphrase, enter it in the Passphrase field or when asked.
  • SSH agent: uses keys loaded in your agent: ssh-agent on macOS and Linux (including 1Password’s), the OpenSSH agent or Pageant on Windows.

Two-factor authentication

If your server asks for a one-time code or anything else only you can answer, BlazeSCP shows the question exactly as the server words it, for example Verification code. Your password is still answered automatically; you only type the code.

This also covers servers that require a key and a code (AuthenticationMethods publickey,keyboard-interactive). Answers go only to that server and are never saved.

Host keys

The first connection to a server shows its key type and SHA-256 fingerprint. Trust it only if it matches what the server owner publishes. BlazeSCP also reads your ~/.ssh/known_hosts, so servers you’ve used with ssh are already trusted.

If a server’s key changes, BlazeSCP refuses to connect and shows the old and new fingerprints. This is what a man-in-the-middle attack looks like, but it also happens after a server is reinstalled. Confirm with the server owner, then remove the old line from the known_hosts file the warning names.

Post-quantum key exchange

BlazeSCP prefers hybrid post-quantum key exchange and falls back to classical automatically. A PQC tag next to the server shows when you have it. See Post-quantum SSH.

SFTP servers support changing permissions (Get Info, or right-click → Get Info) and show symbolic links with their own icon.