Configuration backup file format has changed in 2.17, but both old and new format store the cleartext password easy to see as a hex string near the start of the file. Would it be possible for a future version to store hashed passwords the way any Unix does? Or is password hashing too CPU-intensive to implement on these devices? It’s a good security practice, especially if that password is re-used in other places and all it takes to see the password is to steal the device and dump its flash memory, no need to crack the hash. RouterOS had a similar issue too, fixed a few years ago.