...
This code is incorrect because it decrypts the password stored in credentials.txt. An attacker could potentially decrypt this file to find out what the password is. This attacker could be someone knows or has figured out the encryption scheme being used by the program.