The following DX tags should be set to encrypted:
swareCfgMailswarePassword
swareCfgSchoolswarePassword
swareLoginPolicyswareRADIUSSecret
swareMapswarePassword
swareRelayConfigurationswareRADIUSSecret
swareReportConnectionswarePassword
swareReportDefinitionswarePassword
swareSwIFTNodeswarePassword
swareWebApplicationswarePassword
It's possible that over the years of upgrading webNetwork versions, the encryption setting could have been removed.
Please note, that if you do find the DX tags need to be set to Encrypted, you may also need to re-enter passwords in the corresponding part of the product, so that they are properly saved with Encryption.
For example: if you have to set the DX tag for swareSwIFTNodeswarePassword to Encrypted, you will need to re-save the credentials on each of your File Node objects. This means going to the Authentication tab of each File Node object, and re-entering hard-coded or credential variables, then clicking the SAVE button.