Hi,
Yes it’s secure. The login and password are required because then you’ll be redirected to an Envato official API page, where you’ll generate a key you’ll use in the app.
This procedure is required because the app will have to access your official account details (name, sales, items, etc)
This is the initial announcement thread where the app author tells more about the app, where you can ask him more about the app: