It is considered a very bad idea to store user credentials in plain text  especially passwords For that very reason it is always a good idea to hash passwords before you store them  ideally with a unique salt that you can store in another location