They store hashes, not the password. The article makes that pretty clear.

That said, the title could have been chosen more carefully.