To learn when and how passwords are saved to stored session and remembered in memory please read:
https://beta.winscp.net/eng/docs/security_credentials

OK, you are right the functionality is broken since 4.1.4.
This bug has been added to tracker.

thanx for the response. I followed the instructions in the documentation you sent, but disablepasswordstoring registry key does not work although i set it. if anyone could do it, i would believe i had problem with myself not with winscp

Please read documentation. If that does not help, come back.

I do want that winscp does not store the password of any session in system registry or in .ini file. How can handle this situation? that is to say, users should have to log in by typing their passwords each time. Please help me, because i am very confused :?: