Click the eye in the password field: SyncNow sends a one-time code to your account's email, and the password appears only after you type that code. For the hosting, click Replace next to Stored securely to show the field; for a database, open its Edit window.
The email says which password the code unlocks, and the code works only for that password and that SyncNow window. After a correct code, for 10 minutes other passwords appear without a new code; a shown password turns back into dots when you leave the field or after 60 seconds. Every reveal is recorded in the project's audit, and if the record cannot be written the password is not shown.
Agents cannot reveal stored passwords, and cannot even ask whether one exists. At most 10 codes are sent in 24 hours, and three codes used up by wrong attempts block reveals for the whole account for 24 hours, with a warning email.