Typically, it is not desirable to have plaintext passwords in configuration files. One way to avoid this is obfuscation. This is not a secure encryption. However, it is sufficient enough so that unauthorized persons cannot read the password from a screen.
An obfuscated password always starts with OBF:
The encryption (and decryption) can be done with the Admin console and a script (see Masked and encrypted passwords in configuration files). See also the plugin Encode/Decode.
In addition, the two functions obfuscate() and de-obfuscate() are available.
Extended security
If obfuscation is not secure enough for you, please have a look at section Masked and encrypted passwords in configuration files.