User name and password variables are used by Event Rules to use a single Event Rule to support multiple users with a single Copy/Move Action. This allows EFT to store user name and password variables in memory for the duration of a client session. You can enable or disable this feature on the Site. The default is disabled. For more information on using this in an Event Rule, refer to Copy/Move File to Host Action.
In EFT v7.4.11 and later, you can import and XML file of Event Rules that contain plain-text passwords. This change applies to all fields that use passwords/passphrases. Refer to Exporting and Importing Event Rules for more information.
To persist login credentials in memory for use in Event Rules
In the administration interface, connect to EFT and click the Server tab.
On the Server tab, click the Site you want to configure.
In the right pane, click the Security tab.
Select the Persist username and password credentials for use in Event Rule context variables check box.
Click Apply to save the changes on EFT.
Allowing user name and password replacement variables introduces a potential security vulnerability, because it allows passwords to reside in memory on EFT. The risk is low, but should be avoided unless you require the variables for an Event Rule.