Passwords stored in clear text

To my surprise I found that my credentials are stored in clear text in %AppData%\g-node\WinGIN\UserCredentials.json!

Although - in an ideal case - no one should have access to my personal folder, I don't think that's very secure. Especially since the web interface even offers measures like TFA.

Would it be possible to use more secure methods, like the Windows Credential Manager?

Alternatively, and as a quick workaround, would it be possible to offer a setting to *not* store my password but to prompt for it (at the cost of no background updates)? I'd rather abstain from using the WinGIN until there is a solution.

Start by locating the code that reads and writes %AppData%\g-node\WinGIN\UserCredentials.json, then investigate Windows Credential Manager and the existing web interface's TFA behavior. The issue is done when credentials are no longer stored in clear text, or when a password-prompt alternative is implemented without breaking background updates.

Written by the indexing model from the issue text.