Are passwords encrypted?
Yes. At least those that matter -> the administrators password. The clients passwords are not. After all, the only access someone could gain if they did get a customers password would be to view their stats. We decided it was unnecessary to encrypt these. The administrators password is encrypted, and the admin can change their password at will.