Regarding the credentials used to configure Jenkins calls/webhooks

Hi all,
I recently realized that all calls on Jenkins to notify of new commits were failing.
They are configured here:
repo --> settings --> integration --> Jenkins CI
I figured out that the user had it’s password changed recently and so the credential were outdated.
I updated the password in a few repo manually but this raises questions on my end:

1- is this a good practise to hardcode in all repo the user/password of a Jenkins user ? (hint: it seems not ! :wink: But what is the best practise ?
2- on the short term, how can I update all repo all at once ? Am I forced to go through each and every repo to change it manually ?

Cheers !