Passwords Passwords are likely displayed and stored in clear text by a client like cURL. Take care to prevent unauthorized users from: Viewing displayed passwords Viewing session identifiers Having access to saved data