crypt password in icontrol

As @arjunnambiartc mentioned above, encrypting the passwords is something we've left up to the client developers. There are several options if you don't want your client app to require the user to login. We've seen customers build authentication stores (locally or in a db) that store the bigip management address along with credentials. The client app authenticates that user to the auth store and then pulls down encrypted values of the credentials, decrypts them, and then passes them to the BIG-IP for initialization. iControl is build on top of the BIG-IP's management GUI interface. Right now the only authentication we support is basic authentication with username and password.