We encrypt and store this password in our database. You could create a separated app password in the bsky.app client. But with app passwords not all features (like chat) are available.