Passwords are encrypted with AES-256-GCM and never visible after saving. Only the automation runner can decrypt them.