Assuming my password is safe, I think keychain (on a Mac) takes care of almost all the issues specified. Except the source code