Shell script security best practices?

I know you should avoid storing plain text passwords in scripts, but how? Do you code handling the password, or is it something I should do manually?

Do you have any other suggestions for script security?