Passwords should be stored in hashed form using a slow, salted hash function like bcrypt, Argon2, or PBKDF2. Hashing is one-way, so even if the password database is compromised, attackers cannot easily recover the original passwords. Encryption is reversible and less secure for password storage, and plaintext storage is a critical security failure. Modern systems never store passwords in plaintext.