trex005 on "[Plugin: WP Mail SMTP] Shocking security vunerability"

Changing it to a password field is not going to stop anyone who is able to hack into your server. Thinking this is any help is misguided.

However, if you insist, the file to change is :
wp_mail_smtp.php line 305