Yes , Amar Events securely hashes all passwords before storing them in the database using PHP's built-in password hashing (bcrypt) . Your plain-text password is never stored . Additionally , all sessions use secure , HTTP-only cookies with SameSite protection .