@dkocher commented

For anonymous users by default login will either work without a password or any password. Use a different username if the password matters.

2d4cef9 commented

It's not possible for me to use a different username as I'm not in control of the server. Having an ftp user account with the username anonymous and a specific password is a valid use case (it's not a smart thing to do, but it's a thing that you can do). As it stands, Cyberduck blocks the user from bookmarking an ftp site that is set up in this way for no valid reason.

To be clear, I'm not attempting to perform an anonymous login, I'm trying to log in as the user "anonymous" with a specific password. Cyberduck prevents me from entering a password for the user "anonymous" and I have no access to any other user accounts on the server, so there is no way for me to bookmark this server in the current version of cyberduck

For anonymous users by default login will either work without a password or any password.
It's not an anonymous user, it's a user with the username "anonymous"

Use a different username if the password matters.
I can't, I'm not in control of the server. While the use case is unusual, it seems valid to me and I'm surprised to see the bug report discarded so readily.

@dkocher commented

As a workaround you can set the hidden property connection.login.anon.pass using

defaults write ch.sudo.cyberduck connection.login.anon.pass anonymous

2d4cef9 commented

Oh, excellent. Thanks very much for that, works perfectly!

Much appreciated.