...
Open-AudIT stores the device credentials in it's database. It must store them in a reversible format in order to use them (to connect to the target devices). See Storing Credentials (encryption) in Open-AudIT.
They are encrypted using a key which is found in /open-audit/code_igniter/application/config/config.php.
...