iCam uses both your login and password to identify your iCamSources. Actually, your login and password are never sent to our iCam Broker Server. Both iCam and the iCamSource use your login and password to generate a 40-character random-looking SHA-1 hash string, and that is what is actually sent to the server.
Security with a login and password is only as strong as the login and password you decide to use. Clearly, the login "test" is very easy for other people to guess and therefore, that particular login may not be secure (depending on the password you're using). Make sure to use a login and password that can't be easily guessed by other people.