You'd still need to encrypt the password if it was in the registry anyway.

Search MSDN and Google for .NET encryption.

It says ASP.NET but the same technique can be used for WinForms too:

How To: Encrypt Configuration Sections in ASP.NET 2.0 Using RSA