Mosquitto password visible in z2mqtt addon

Hi,

I just started using z2mqtt and I have a probably silly question.
In the configuration of the z2mqtt addon I had to enter the mosquitto user and password.
I created a user for this (not a person) and this user is marked as not able to log in.
So making the password visible in the z2mqtt configuration should not be a security risk.
am I right?

Where did you set that?

This is all I see for user settings:

This is what I do…

in Z2M:
image

image

Then there’s no questions or crap to remember.

“Active” switch controls if the user can login
First line below Password

Does that not stop it from being used with the add-on as well?

Mine is working…