I hope by "password fields are encrypted" you mean that only hashes are stored.