Is it a good practice to isolate login information (username, password) in a separate table?
I would recommend you implement security by encrypting the data you want to keep secure.  Separating the username and password to a different table would not significantly improve their protection.