452

I know it is not recommended, but is it at all possible to pass the user's password to scp?

I'd like to copy a file via scp as part of a batch job and the receiving server does, of course, need a password and, no, I cannot easily change that to key-based authentication.

3

22 Answers 22

738

Use sshpass:

sshpass -p "password" scp -r [email protected]:/some/remote/path /some/local/path

or so the password does not show in the bash history

sshpass -f "/path/to/passwordfile" scp -r [email protected]:/some/remote/path /some/local/path

The above copies contents of path from the remote host to your local.

Install :

  • ubuntu/debian
    • apt install sshpass
  • centos/fedora
    • yum install sshpass
  • mac w/ macports
    • port install sshpass
  • mac w/ brew
    • brew install https://raw.githubusercontent.com/kadwanev/bigboybrew/master/Library/Formula/sshpass.rb
15
  • 20
    On Ubuntu 12.04 it only worked for me with single quotes over the password (e.g. 'password' instead of "password").
    – odedfos
    Feb 6, 2014 at 15:32
  • 7
    @odedfos, yes you need to use single quotes because some password generated chars can have a special interpretation in double quoted string interpolation
    – TerryE
    Jul 19, 2014 at 12:50
  • 7
    This is how you install sshpass apt-get install sshpass Aug 21, 2014 at 6:05
  • 6
    On CentOS it's yum -y install sshpass
    – jgritty
    Aug 28, 2014 at 23:05
  • 27
    The most secure way to do this is with a password file, like this: sshpass -f passwdfile` scp [...]. This way, the password won't show up in ps` listings, etc. and you can protect the password with file permissions. Mar 20, 2015 at 15:30
68

just generate a ssh key like:

ssh-keygen -t rsa -C "[email protected]"

copy the content of ~/.ssh/id_rsa.pub and lastly add it to the remote machines ~/.ssh/authorized_keys

make sure remote machine have the permissions 0700 for ~./ssh folder and 0600 for ~/.ssh/authorized_keys

11
  • 71
    As I wrote: No, I cannot easily switch to key-based authentication. Mar 9, 2012 at 12:53
  • 3
    Do you mean .authorized_keys rather than . authorization_keys?
    – SmallChess
    Apr 23, 2015 at 8:06
  • 2
    A valid use for this would be a bash script that does multiple scp/ssh calls to a server where you want to ask the user for the password for the remote server. The password will then not show in history and you still have the befit of challenging for the password... but only once. I don't want to use a key file because I want to still authenticate the script user.
    – Wes Grant
    Aug 27, 2015 at 19:45
  • 2
    Another valid use would be if you cannot easily enable key-based authentication on the target. Example: One of the main NAS producers - Synology with their DSM 6.0 - does not support it even in 2016. Sure, you could mess with configuration files and hope an update won't just overwrite it again (updating DSM frequently does break custom modifications). Sometimes - especially when the OP expressly writes they're already aware it's not optimal - people just need a solution.
    – Aaa
    Jun 3, 2016 at 17:14
  • 6
    You should use ssh-copy-id -i ~/.ssh/id_rsa.pub <remote_server> to copy the key on the remote server Nov 29, 2018 at 9:24
61

If you are connecting to the server from Windows, the Putty version of scp ("pscp") lets you pass the password with the -pw parameter.

This is mentioned in the documentation here.

4
  • 2
    Show an example, please.
    – SDsolar
    Jan 23, 2017 at 20:23
  • Also, might want to add C:\Program Files (x86)\PuTTY to your path to use these commands.
    – SDsolar
    Jan 23, 2017 at 20:38
  • 4
    @SDsolar here's a syntax example: pscp -pw 'MyPa$$word' username@servername:/somedir/somefile ~/somedest (I hate using putty like this, but it works)
    – geneorama
    Aug 30, 2017 at 18:55
  • 2
    @geneorama password worked for me but only without the single quotations.. thanks..
    – amyassin
    Nov 1, 2021 at 12:24
49

curl can be used as a alternative to scp to copy a file and it supports a password on the commandline.

curl --insecure --user username:password -T /path/to/sourcefile sftp://desthost/path/
8
  • 1
    It quite slower than 'scp' but it does the job fine.
    – Victor
    May 29, 2018 at 6:15
  • I found this to be faster when the destination is configured with a huge password prompt delay. scp has to wait 30+ seconds to let me put in a password, but curl worked immediately.
    – Ghost8472
    Sep 10, 2018 at 22:02
  • @Ghost8472 configured yes, but sometimes this delay is resolving the hostname, and also happens for sftp.
    – mckenzm
    Jun 7, 2019 at 3:35
  • 4
    I got "curl: (1) Protocol "sftp" not supported or disabled in libcurl"
    – lobotmcj
    Feb 6, 2020 at 20:34
  • I got an error saying that curl doesn't recognize -T as a parameter. Oct 28, 2021 at 9:25
43

You can script it with a tool like expect (there are handy bindings too, like Pexpect for Python).

3
  • 1
    Link to expect.nist.gov is broken. Maybe this?: expect.sourceforge.net Oct 4, 2016 at 16:08
  • 1
    sudo apt-get install expect
    – SDsolar
    Jan 23, 2017 at 20:39
  • 2
    >> brew info sshpass Error: No available formula with the name "sshpass" We won't add sshpass because it makes it too easy for novice SSH users to ruin SSH's security. ;) Oct 16, 2018 at 20:44
25

You can use the 'expect' script on unix/terminal

For example create 'test.exp' :

#!/usr/bin/expect
        spawn scp  /usr/bin/file.txt root@<ServerLocation>:/home
        set pass "Your_Password"
        expect {
        password: {send "$pass\r"; exp_continue}
                  }

run the script

expect test.exp 

I hope that helps.

1
  • 8
    Prerequisite: sudo apt-get install expect
    – SDsolar
    Jan 23, 2017 at 20:36
11

You may use ssh-copy-id to add ssh key:

$which ssh-copy-id #check whether it exists

If exists:

ssh-copy-id  "user@remote-system"
1
  • Superb. Simple, works, and no 3rd-party packages or ssh-keygen setup required.
    – SigmaX
    Jul 8, 2021 at 19:14
9

Here is an example of how you do it with expect tool:

sub copyover {
    $scp = Expect->spawn("/usr/bin/scp ${srcpath}/$file $who:${destpath}/$file");
    $scp->expect(30,"ssword: ") || die "Never got password prompt from $dest:$!\n";
    print $scp 'password' . "\n";
    $scp->expect(30,"-re",'$\s') || die "Never got prompt from parent system:$!\n";
    $scp->soft_close();
    return;
}
1
  • 3
    This is in perl, sorry i didn't write that. (5 years ago :) )
    – Espo
    Jun 24, 2013 at 6:46
7

Nobody mentioned it, but Putty scp (pscp) has a -pw option for password.

Documentation can be found here: https://the.earth.li/~sgtatham/putty/0.67/htmldoc/Chapter5.html#pscp

3
  • 17
    It was mentioned in user524607's answer 5 years ago.
    – Barmar
    Sep 30, 2015 at 18:58
  • Found it, and am adding C:\Program Files (x86)\PuTTY to my path.
    – SDsolar
    Jan 23, 2017 at 20:40
  • Under WINE ? on Windows use plink. BTW people putty-tools is a package.
    – mckenzm
    Jun 9, 2021 at 7:14
4

Once you set up ssh-keygen as explained above, you can do

scp -i ~/.ssh/id_rsa /local/path/to/file [email protected]:/path/in/remote/server/

If you want to lessen typing each time, you can modify your .bash_profile file and put

alias remote_scp='scp -i ~/.ssh/id_rsa /local/path/to/file [email protected]:/path/in/remote/server/

Then from your terminal do source ~/.bash_profile. Afterwards if you type remote_scp in your terminal it should run the scp command without password.

4

Here's a poor man's Linux/Python/Expect-like example based on this blog post: Upgrading simple shells to fully interactive TTYs. I needed this for old machines where I can't install Expect or add modules to Python.

Code:

(
    echo 'scp [email protected]:./install.sh .'
    sleep 5
    echo 'scp-passwd'
    sleep 5
    echo 'exit'
) |

python -c 'import pty; pty.spawn("/usr/bin/bash")'

Output:

scp [email protected]:install.sh .
bash-4.2$ scp [email protected]:install.sh .
Password: 
install.sh                                 100%   15KB 236.2KB/s   00:00    
bash-4.2$ exit
exit
0
4
  1. Make sure password authentication is enabled on the target server. If it runs Ubuntu, then open /etc/ssh/sshd_config on the server, find lines PasswordAuthentication=no and comment all them out (put # at the start of the line), save the file and run sudo systemctl restart ssh to apply the configuration. If there is no such line then you're done.
  2. Add -o PreferredAuthentications="password" to your scp command, e.g.:
    scp -o PreferredAuthentications="password" /path/to/file user@server:/destination/directory
    
5
  • How do you indicate the actual password though?
    – Osmar
    Nov 20, 2020 at 4:09
  • 1
    @Osmar You'll be prompted for password when you run the command
    – Finesse
    Nov 21, 2020 at 8:21
  • 2
    What is the point? The question was How to pass password to scp? that means (I think) I don't want to type it.
    – Magno C
    Jan 10 at 17:55
  • @MagnoC, the point was to switch scp to a password-based authentication
    – Finesse
    Jan 11 at 12:40
  • 1
    @Finesse ok but the O.P. needs to not type password. I think scp is already password-based as it always ask for it in default installation. He (as me) needs to do some automated process (an ETL maybe) that needs to call scp without user interactivity. That's my interpretation of this question. What actually solved my problem was /usr/bin/sshpass -p "$6" scp -o 'StrictHostKeyChecking no' -r $7@$5:$8 $9 inside a shell script that is called from inside a Java program responsible to ask the password from a WEB browser.
    – Magno C
    Jan 11 at 12:57
0
  1. make sure you have "expect" tool before, if not, do it

    # apt-get install expect

  2. create the a script file with following content. (# vi /root/scriptfile)

    spawn scp /path_from/file_name user_name_here@to_host_name:/path_to

    expect "password:"

    send put_password_here\n;

    interact

  3. execute the script file with "expect" tool

    # expect /root/scriptfile

0

copy files from one server to other server ( on scripts)

Install putty on ubuntu or other Linux machines. putty comes with pscp. we can copy files with pscp.

apt-get update
apt-get install putty 
echo n |  pscp -pw "Password@1234" -r user_name@source_server_IP:/copy_file_path/files /path_to_copy/files

For more options see pscp help.

0

Since not using key based auth isn't in the title, the following steps will help users who can switch to key based auth. It skips passwords for scp and ssh.

Copy your ssh public key to the server (careful about not overwriting authorized keys)

scp ~/.ssh/id_rsa.pub user@remoteIP:~/.ssh/authorized_keys

Change the permissions:

chmod 600 authorized_keys

Follow a guide like this for more details: https://idratherbewriting.com/jekylldoctheme-separate-outputs/mydoc/mydoc_no_password_prompts_scp.html

0

Working fine with powershell and Posh-SSH. Powershell core should be supported

Import-Module "C:\tmp\Posh-SSH\3.0.8\Posh-SSH.psd1" # https://github.com/darkoperator/Posh-SSH/releases

# Connect with pubkey authentication, providing the Passphrase non-interactive, and accepting any remote pubkey
$sftpSession = New-SFTPSession -ComputerName example.com -Credential $keyFilePassphrase -KeyFile "C:\Path\To\private_key" -AcceptKey

# Write file to remote
Set-SFTPItem -SessionId $sftpSession.SessionID -Path C:\tmp\test.txt -Destination "/home/user/"

You could also use expect:

#!/usr/bin/expect

spawn scp user@host:/source user@host2:/target
expect "password"
send -- "$PASSWORD\n"
interact

Install expect and run the script

sudo apt install expect -y
chmod +x /usr/local/bin/update-file.exp
/usr/local/bin/update-file.exp
-1

In case if you observe a strict host key check error then use -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null options.

The complete example is as follows sshpass -p "password" scp -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null [email protected]:/tmp/from/psoutput /tmp/to/psoutput

-1

You can use below steps. This works for me!

Step1- create a normal file suppose "fileWithScpPassword" which contains the ssh password for the destination server.

Step2- use sshpaas -f followed by password file name and then normal scp command.

sshpass -f "fileWithScpPassword" scp /filePathToUpload user@ip:/destinationPath/

-1

One easy way I do this:

Use the same scp cmd as you use with ssh keys i.e

scp -C -i <path_to opens sshkey> <'local file_path'> user@<ip_address_VM>: <'remote file_path’>

for transferring file from local to remote

but instead of providing the correct <path_to_opensshkey>, use some garbage path. Due to wrong key path you will be asked for password instead and you can simply pass the password now to get the work done!

3
  • Jeez.... I can't believe. Why one don't simply call scp and type the password as any normal person? The O.P. don't want to type the password.
    – Magno C
    Jan 10 at 17:58
  • @MagnoC your typed password remains in the shell history Jan 11 at 9:25
  • Despite this ... the O.P. don't want to type the password. He wants to pass it using some automated process. So your you will be asked for password instead is not useful here.
    – Magno C
    Jan 11 at 11:27
-2

An alternative would be add the public half of the user's key to the authorized-keys file on the target system. On the system you are initiating the transfer from, you can run an ssh-agent daemon and add the private half of the key to the agent. The batch job can then be configured to use the agent to get the private key, rather than prompting for the key's password.

This should be do-able on either a UNIX/Linux system or on Windows platform using pageant and pscp.

2
  • 5
    The question said he can't use key-based authentication.
    – Barmar
    Sep 30, 2015 at 19:00
  • 2
    Also, if it were me, I assume I can't alter the other server - all I want is to copy a file.
    – SDsolar
    Jan 23, 2017 at 20:34
-6

All the solutions mentioned above can work only if you the app installed or you should have the admin rights to install except or sshpass.

I found this very useful link to simply start the scp in Background.

$ nohup scp file_to_copy user@server:/path/to/copy/the/file > nohup.out 2>&1

https://charmyin.github.io/scp/2014/10/07/run-scp-in-background/

1
  • 2
    How would running the scp in the background input the password??
    – thomas.han
    Apr 28, 2020 at 5:46
-10

I found this really helpful answer here.

rsync -r -v --progress -e ssh user@remote-system:/address/to/remote/file /home/user/

Not only you can pass there the password, but also it will show the progress bar when copying. Really awesome.

1
  • 22
    and how exactly are you providing password here? Jun 3, 2014 at 13:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.