Hover apparently stores your password in plaintext, as discussed: http://news.ycombinator.com/item?id=2727123.