I'm not sure why you're talking about stringifying your object. You'd stringify it if you needed to send the data across a network or something, not when you need to manipulate it in JS.
...how do I extract the strings in {...USER: "aaa", PWD: "zzz"...}?
Assuming you have a variable referring to the object, something like the following (with or without nice line breaks and indenting to make it readable, and with or without quotes around the property names):
var obj = { "m_id": "xxx", "record": { "USER": "yyy", "PWD" : "zzz", "_createdAt": 11111, "_updatedAt": 00000 }, "state": "valid" };
Then you can access the properties in the nested record object as follows:
console.log( obj.record.USER ); // outputs "yyy" console.log( obj.record.PWD ); // outputs "zzz" // etc.
(Note: in your question you had two typos, a comma that should've been a colon in between "PWD" and "zzz", and a dot that should've been a comma in between 11111 and "_updatedAt". There's no way that JSON.stringify() would have produced the string that you showed with those mistakes.)