Security risk regarding passwords

[git-commit]

Some Password Strings or char[] are not immediately collected using
System.gc()
for Strings or overridden with zeros using
Arrays.fill(pwArray,'0') //Better even fill with random character!

Until this is fixed there is the possibility of your password being read by another application.

If you're on windows you can use a tool like OllyDbg or CheatEngine to see if the password remains in memory after usage.
Example screenshot: