As it stands the encryption provides very little security. If somebody is able to get to the tstest file that has the login steps - you can simply change the primary target of the IsPassword step and retrieve the password by typing it into a plain text field