Without elaborate security schemes, it's probably going to be in plain text somewhere. The first alternative is to put it in a file with limited permissions.
- [web2py] Mail credentials, recaptcha keys, and privacy/security monotasker
- [web2py] Re: Mail credentials, recaptcha keys, and privacy... pbreit