ORADeveloper may save your connection information (including password) on disk if you want to. You can choose to save your connection with password or not. All passwords are encrypted and stored in private app memory area which is inaccessible by other programs. Passwords are using only for connecting and reconnecting to database.