Encrypting Passwords

yes the password is encrypted within WWF

its 160 bit 1 way hash encryption with a Salt Key to help prevent simularities within the encryption

the salt key is randomly generated.

and is added to the end of the password then encrypted.

so the salt key is stored per user basis (this makes it even more secure as each user has a different Salt Key)

and the encrypted password is stored within the database

then to check the password you encrypt the entered password using the users Salt Key. and then compare it against the Encrypted Password stored in the database if they both match the password entered is correct.