Security/encryption accessing Mikrotik remotely?

I want to setup the Mikrotik so that I can access it remotely over the internet via Winbox. Does Winbox use any encryption for the username/password when logging in, or is everything plaintext?

Is there any solution for this without having to setup a VPN?

Also, is there any way to change the default port to access Mikrotik via the web interface (port 80)?

Winbox uses 8192 TCP port, it uses encryption (TLS protocol) when ‘Secure connection’ at Winbox is checked.