The QPR BizArchitecture Server must have access to both QPR database and the User Management System information. Since acquiring these bits of information requires a password most of the time, these passwords must be entered in the QPR Configuration Manager.
The QPR BizArchitecture Server saves the needed passwords into an .ini file. The passwords are listed in an unreadable encrypted format. Despite the encryption, normal users should not have access to the contents of the .ini file.
The passwords protecting the QPR Modeling Client file models are (naturally) stored inside the model. Still, the password is encrypted, so it cannot be acquired by examining the model.