Do you save user passwords in the DB without encrypting them?
Yes, they are encrypted with a standard Wordpress encryption method that uses Salt Hashes.
If you have any more doubts view this link:
http://ttmm.io/tech/wordpress-password-hashing/.
Or just ask another question, we enjoy your queries.