[E. Pluribus Unum]

Passwords are hashed on the server side. They are not encrypted before being sent.

Any secure site uses https:// (extension of the HTTP communications protocol to support TLS encryption), so the entire transmission is encrypted.

You should never enter anything sensitive on any site that doesn't use it.

[Openurmind]

Have you checked out the “Gemini” Protocol? Pretty cool use of TLS Certs for secure end to end connections like is common. But it does it through the wild net and is truly tunneled end to end or it will not even make a connection to the personal servers.

[TexasGator]

“Any secure site uses https:// (extension of the HTTP communications protocol to support TLS encryption), so the entire transmission is encrypted.”

True. But that is for the communication. If the communication is not encrypted, the password is sent with no encryption.