Thanks for the response Loki, that is not my issue though.
The only mirc.ini in program files is in the defaults subfolder.
In AppData is where I see servers.ini and mirc.ini with recent modified dates and the changes I made to it.
I noticed there is a few standards to what is stored, password-wise, in these ini files.
In servers.ini, a server password looks obfuscated in the [servers] section, but in the [recent] section it is plain text. In mirc.ini, the server password is obfuscated differently in the [mirc] section hosts key.
I'm not sure why but maybe the developer should pick one method, hopefully an obfuscated flavor. This might be why when I close mirc, and try to connect to the last server I was on, I get an invalid password. It might be decrypting the password wrong.