yeah, to be a bit secure

we have to save coded password not in wdl. In dll itself, for example, in registry, in data file, in special disk place,... And you can store in wdl not a real password, but some way coded/scrambled/mangled one.
To provide more security you can download sources and zlib to write your own compressed format (like in a6pro, it use zlib too).