i fail to understand how any decent web company does not at the very minimum hash passwords in this day and age. More importantly - a company who teaches people coding and often runs 'best practices for XXXX courses' each month.