I might even go as far as saying that passwords should simply not be stored at all anywhere.