Use isql options to conceal a password as you type the password when you use alter user or create user.
See Concealing Password Input in the Replication Server Administration Guide Volume 1.