How to Stop Storing OpenClaw API Keys in Plaintext

On February 13, 2026, a Vidar infostealer variant grabbed openclaw.json, device.json, and memory files from a compromised machine. The full credential dump, including LLM API keys, was confirmed by Hudson Rock. Their CTO put it bluntly: infostealer d...