It's fairly common practice these days for web sites that require simple user authentication to store the users passwords in a hashed form rather than plain text.