Good question! Synology Download Manager stores/transmits your credentials as securely as your settings and the browser allow it to. See https://github.com/seansfkelley/synology-download-manager/blob/master/FAQ.md for more detail.