Foldit stores the username and password in clear text in Mac OS X, presenting a big security vulnerability. Instead Foldit should use Keychain, Mac OS X's long running password manager. This will provide secure storage for the password and remove the responsibility of securely storing the password from the Foldit client.