It is however considered a good practice and recommended [1].
back
1 comments
See my other comment re: "encrypted".
In general terms, hashing a combination of a salt and the plaintext password is recommended. The problem with encrypting the password, is that typically an attack that exposes the encrypted password will also expose the encryption key -- allowing the recovery of the plaintext password by simply decrypting the ciphertext password that is stored.