Passwords on recent connections are being saved in plain text, the SQLite db file localStorage.db can be opened and read in any text editor.
Passwords should be encrypted on save. The .NET Data Protection API provides programming interfaces to achieve this.