When I am on a troubleshooting call or asking in an email: "Please show me what your configuration is", it is not uncommon for the person to inadvertently show me the password to their SQL database.

Is there an advantage to having the name and password stored there in the same file as mundane things like table display settings?

Is there a downside to separating them into two files?