When using standard FTP to transfer files, the protocol sends the necessary account name and password without encryption.

A hybrid attack will add numbers or symbols to the filename to successfully crack a password.

Your Notes application will have to be able to access this ID file and password when attempting to encrypt and decrypt messages.