Why should you never use your username and password when there is no https in url?

HTTPS means that the website is secure and that it can be trusted. If the HTTPS isn't in the url, the website may not be secure, so you'll want to be careful with username and password.