Are Passwords Encrypted in App Settings?

[dsilberg]

I'm building an app which needs a username and password to call out to an API.  My intent is to use the companion settings to capture these values.  

This:

<TextInput label="password" settingsKey="password" type="password" onChange={log} />

presents a masked textbox but when I log the changed value it's in plaintext.  It looks like: 

{"name":"password123"}

My assumption is that nothing is done to encrypt this value and that it is stored on device in plaintext.  Is that accurate?  Does anybody know what kind of security exists around stored passwords?  Will I need to encrypt this myself?  Does FitBit encrypt the data at rest? 

[JonFitbit]

You'd need to encrypt this yourself.