you are able to specify it whenever you clone: http://user:pass@url.com/repo/

or place it inside your global .hgrc file (note passwords is within plain text)