“Passwords are hashed (one-way encryption)”
Technically,
Passwords are hashed on the server side. They are not encrypted before being sent.
Any secure site uses https:// (extension of the HTTP communications protocol to support TLS encryption), so the entire transmission is encrypted.
You should never enter anything sensitive on any site that doesn't use it.