It's always good to encrypt the pass in local storage to make the attackers difficult to decrypt the ciphers even though the data theft happens. Use different keys to encrypt from user to user.