<i>I'd get the list by doing a password reminder and seeing if they email me my password.</i><p>That will tell you whether they send the password in clear, not whether they encrypt it. The only information you'll have is:<p>IF (they send you the password in clear) THEN (they don't use a one-way hash)<p>There is no other information to be derived from this method of checking.