QuickFile doesn’t know your “Gov login details” at any point - MTD uses a “three legged” authorization flow where you log in directly to the Government Gateway and the gateway sends a “token” to QuickFile that they use when calling the MTD APIs. QuickFile only ever sees the token; your actual credentials go straight from you to the Gateway without flowing via QuickFile.