Overview
FileFetch uses the Salesforce SOAP API to authenticate with your Salesforce org. You can connect to Production, Sandbox, or custom domain instances using username, password, and security token authentication.Security First: Your credentials are stored securely in your operating system’s keychain (macOS Keychain or Windows Credential Manager) and never leave your computer.
Salesforce Environments
FileFetch supports three types of Salesforce environments:- Production
- Sandbox
- Custom Domain
Production OrganizationsUse this for live Salesforce orgs.
- URL:
https://login.salesforce.com - Use Case: Production data, real customer information
- Recommended For: Exporting files from your main Salesforce org
Getting Your Security Token
Salesforce requires a security token when logging in from external applications like FileFetch.1
Log in to Salesforce
Go to your Salesforce org in a web browser
2
Navigate to Settings
Click your profile icon (top right) → Settings
3
Find Personal Information
In the left sidebar, search for or navigate to:
My Personal Information → Reset My Security Token
4
Reset Token
Click Reset Security TokenSalesforce will send a new security token to your email address
5
Copy Token
Check your email for the security token and copy it
Signing In
1
Launch FileFetch
Open the FileFetch application
2
Select Environment
Choose your Salesforce environment type from the dropdown
3
Enter Credentials
Fill in your login information:
- Username: Your Salesforce username (usually your email)
- Password: Your Salesforce password
- Security Token: The token from your email
Note: You enter the password and security token in separate fields. Do not concatenate them.
4
Authenticate
Click Sign InFileFetch will:
- Connect to Salesforce using the SOAP API
- Verify your credentials
- Store them securely in your system keychain
- Retrieve your session token for API calls
Credential Storage
FileFetch stores your credentials locally using your operating system’s secure credential storage:- macOS
- Windows
macOS KeychainCredentials are stored in the macOS Keychain, the same secure storage used by Safari, Mail, and other native apps.
- Location: Keychain Access app
- Service Name:
app.filefetch.filefetch - Security: Protected by your Mac user password
- Encrypted: Yes, using macOS encryption
- Open Keychain Access (Applications → Utilities)
- Search for
filefetch - Right-click the entry to view or delete
Troubleshooting Login Issues
Invalid username, password, security token, or user locked out
Invalid username, password, security token, or user locked out
Possible Causes:
- Incorrect username, password, or security token
- User account is locked or deactivated
- Password has expired
- Verify your username is correct (usually your email)
- Double-check your password
- Make sure you’re using the latest security token from your email
- Try logging in via the Salesforce website to verify credentials
- Contact your Salesforce administrator if account is locked
Login timeout or connection failed
Login timeout or connection failed
Possible Causes:
- Network connectivity issues
- Firewall blocking Salesforce API
- Incorrect environment selected
- Custom domain URL incorrect
- Check your internet connection
- Verify you selected the correct environment (Production/Sandbox/Custom)
- For custom domains, ensure URL is correct and includes
https:// - Check if your firewall is blocking connections to
*.salesforce.com - Try accessing Salesforce in a browser to verify connectivity
Security token not working / 'invalid grant' error
Security token not working / 'invalid grant' error
Possible Causes:
- Old or expired security token
- Token was reset but you’re using the old one
- IP restrictions require no token, but you’re providing one
- Reset your security token in Salesforce
- Check your email for the new token
- Copy the entire token (no spaces)
- If your IP is trusted, try leaving the token field blank
Two-factor authentication (2FA) required
Two-factor authentication (2FA) required
Current Status: FileFetch does not currently support OAuth 2.0 or 2FA.Workaround:
- Add your IP address to the Salesforce trusted IP ranges
- This allows API access without 2FA
- Contact your Salesforce administrator for assistance
OAuth 2.0 support is planned for a future release.
User does not have API access
User does not have API access
Cause: Your Salesforce user profile doesn’t have API access enabled.Solution:
Contact your Salesforce administrator to enable “API Enabled” permission on your user profile.
Logging Out
To log out of FileFetch:- Click your user profile in the bottom left of the sidebar
- Click the logout icon (arrow)
- Your session will end and credentials remain stored for next time
Switching Orgs
To connect to a different Salesforce org:- Log out of your current session
- The login screen will appear
- Select the new environment
- Enter credentials for the new org
- Sign in
Security Best Practices
Use Strong Passwords
Ensure your Salesforce password is strong and unique
Protect Your Token
Never share your security token with others
Regular Token Resets
Reset your token if you suspect it’s been compromised
Monitor Login History
Check Salesforce login history regularly for suspicious activity