According to the Tick History User Guide at https://developers.refinitiv.com/thomson-reuters-tick-history-trth/thomson-reuters-tick-history-trth-rest-api/docs?content=47825&type=documentation_item on page 33
The password is sent as "plaintext" but it is sent over "HTTPS"