Skip to main content

Overview

FileFetch uses the Salesforce SOAP API to authenticate with your Salesforce org. You can connect to Production, Sandbox, or custom domain instances using username, password, and security token authentication.
Security First: Your credentials are stored securely in your operating system’s keychain (macOS Keychain or Windows Credential Manager) and never leave your computer.

Salesforce Environments

FileFetch supports three types of Salesforce environments:
Production OrganizationsUse this for live Salesforce orgs.
  • URL: https://login.salesforce.com
  • Use Case: Production data, real customer information
  • Recommended For: Exporting files from your main Salesforce org
Be careful when exporting from Production. Ensure you have proper permissions and understand what data you’re downloading.

Getting Your Security Token

Salesforce requires a security token when logging in from external applications like FileFetch.
1

Log in to Salesforce

Go to your Salesforce org in a web browser
2

Navigate to Settings

Click your profile icon (top right) → Settings
3

Find Personal Information

In the left sidebar, search for or navigate to: My Personal Information → Reset My Security Token
4

Reset Token

Click Reset Security TokenSalesforce will send a new security token to your email address
5

Copy Token

Check your email for the security token and copy it
Keep your security token confidential. Anyone with your username, password, and token can access your Salesforce org.
Can’t find the Reset Security Token option?Your org may have IP restrictions enabled. If your IP address is whitelisted in Salesforce, you may not need a security token. Try leaving it blank. If that doesn’t work, contact your Salesforce administrator.

Signing In

1

Launch FileFetch

Open the FileFetch application
2

Select Environment

Choose your Salesforce environment type from the dropdown
3

Enter Credentials

Fill in your login information:
  • Username: Your Salesforce username (usually your email)
  • Password: Your Salesforce password
  • Security Token: The token from your email
Note: You enter the password and security token in separate fields. Do not concatenate them.
4

Authenticate

Click Sign InFileFetch will:
  1. Connect to Salesforce using the SOAP API
  2. Verify your credentials
  3. Store them securely in your system keychain
  4. Retrieve your session token for API calls

Credential Storage

FileFetch stores your credentials locally using your operating system’s secure credential storage:
macOS KeychainCredentials are stored in the macOS Keychain, the same secure storage used by Safari, Mail, and other native apps.
  • Location: Keychain Access app
  • Service Name: app.filefetch.filefetch
  • Security: Protected by your Mac user password
  • Encrypted: Yes, using macOS encryption
To view or delete stored credentials:
  1. Open Keychain Access (Applications → Utilities)
  2. Search for filefetch
  3. Right-click the entry to view or delete

Troubleshooting Login Issues

Possible Causes:
  • Incorrect username, password, or security token
  • User account is locked or deactivated
  • Password has expired
Solutions:
  1. Verify your username is correct (usually your email)
  2. Double-check your password
  3. Make sure you’re using the latest security token from your email
  4. Try logging in via the Salesforce website to verify credentials
  5. Contact your Salesforce administrator if account is locked
Possible Causes:
  • Network connectivity issues
  • Firewall blocking Salesforce API
  • Incorrect environment selected
  • Custom domain URL incorrect
Solutions:
  1. Check your internet connection
  2. Verify you selected the correct environment (Production/Sandbox/Custom)
  3. For custom domains, ensure URL is correct and includes https://
  4. Check if your firewall is blocking connections to *.salesforce.com
  5. Try accessing Salesforce in a browser to verify connectivity
Possible Causes:
  • Old or expired security token
  • Token was reset but you’re using the old one
  • IP restrictions require no token, but you’re providing one
Solutions:
  1. Reset your security token in Salesforce
  2. Check your email for the new token
  3. Copy the entire token (no spaces)
  4. If your IP is trusted, try leaving the token field blank
Current Status: FileFetch does not currently support OAuth 2.0 or 2FA.Workaround:
  1. Add your IP address to the Salesforce trusted IP ranges
  2. This allows API access without 2FA
  3. Contact your Salesforce administrator for assistance
OAuth 2.0 support is planned for a future release.
Cause: Your Salesforce user profile doesn’t have API access enabled.Solution: Contact your Salesforce administrator to enable “API Enabled” permission on your user profile.

Logging Out

To log out of FileFetch:
  1. Click your user profile in the bottom left of the sidebar
  2. Click the logout icon (arrow)
  3. Your session will end and credentials remain stored for next time
Logging out doesn’t delete your stored credentials. They remain in your keychain for quick re-authentication next time.

Switching Orgs

To connect to a different Salesforce org:
  1. Log out of your current session
  2. The login screen will appear
  3. Select the new environment
  4. Enter credentials for the new org
  5. Sign in
FileFetch will update the stored credentials for the new org.

Security Best Practices

Use Strong Passwords

Ensure your Salesforce password is strong and unique

Protect Your Token

Never share your security token with others

Regular Token Resets

Reset your token if you suspect it’s been compromised

Monitor Login History

Check Salesforce login history regularly for suspicious activity

Next Steps