u/ElectricYFronts

When using the Postman extension in vsCode I was wondering where all the Collections credentials and tokens are stored. Are they secure and what is best practice for its use? Should I switch to curl? And can I use environment variables like curl?

The postman documentation just talks about using the postman vault but doesn't say where they are stored and how securely if you aren't using it.