They are server side, salted, and use multiple round hashing :)