FTP client on windows that save session password in encrypted text [closed]

Eventually ends up by using WinSCP which encrypt (or hash?) password and save in registry. So it's not easy to see plain text pwd.

FileZilla developers said that OS should secure passwords for you , but what if someone got acces to your PC (direct acces , without hacking , just sitting in your chair) and looks at your passwords in that SiteManager's XML ?

If you can use the password, you can decrypt it as well, by using the same algorithm as the program uses. Even if you do not know the algorithm, you still can sniff the plain-text authentication using Wireshark.

Cyberduck for Windows stores passwords (Wiki) encrypted using the System.Security.Cryptography.DataProtector API.

WinSCP does not save passwords in plain text.

Though obviously it can only "obfuscate" the password. It is not possible to securely encrypt passwords in a way that still allows for automatic use.
Read about security of credentials.

For better security, you can enable password encryption using master password.