[Amezarak]

> If you are purchasing online, all my credit and debit card payments require me to enter 3 random characters from my (previously set up) password.

Doesn't this mean your password is being stored unhashed?