I've got a security dilemma and would love to get the feedback of developers and users. How do you feel about storing username/password credentials in plaintext? Is there a better way to store this? I've already been worrying over this with DialCentral. I've held off so far since it takes advantage of cookies (which expire with time though). Remember the Milk might also be fairly safe since it gives me a token. A stolen token has more limited ramifications, only works for the site, can't change password, and can be revoked.