Re: passwords in winscp.ini
WinSCP is open source. Just check the code.
Before posting, please read how to report bug or request support effectively.
Bug reports without an attached log file are usually useless.