I wonder if it is possible to add a password field for a Node-Red subflow environment variable. I want to hand over user and password but be sure, that the password is not visible and also not copied when copying the flow.
Not in the current release.
The ability to identify a Subflow property as a credential-type field will come in the next release - 1.1.0.