Effective website security is difficult, and often an afterthought. Not all sites or services store passwords securely.