Obfuscate your maven settings passwords

If you still have cleartext passwords in your settings.xml, then it is time for you to mask/obfuscate them.  It will not be fool proof but definitely better than having your passwords in the open.
https://community.jboss.org/wiki/MavenSettingsxmlMaskingPassword