You don't need to!replit shows code to you!which includes plain text passwords!
Oh then ill force a password of 123456(turn the input into a hidden which disables input unless hecker looks at inspect element)
ive got attacked before like this lol
then i used 123456 on every insecure password blank