Actually once you put the password, anyone can go on the email preferences press the "show" checkbox and see it. This is very useful in the debugging version of the application but potentially disastrous for a user whose laptop is shared or stolen...