Security issue: imported URLs are stored along with password.