I assume passwords are hashed?