Not entirely related to free or commercial software storing passwords in the clear but there is an additional general "security" / "integrity" issue these days with respect to writing software. I've had quite a few requests for my Scan125 Control Program to be remotely controlled from another computer/device. WiFi, HTTP(S), LAN etc. I've politely declined these request as whilst I could probably do it I'm not experienced enough in writing those sort of software extensions I would need to code to provide a decent *secure* solution. Of course opening one's code to public/private scrutiny is not something commercial developers are going to do. Other private non commercial developers seek to keep their code private for what ever reason.