&gt; The login request is always sent via https, even when you are using the site over plain http. So your password should always be encrypted.<p>Though it doesn&#x27;t stop someone (eg. malicious software on a wifi router) altering the <i>login form itself</i> to submit passwords to a different URL...