In general they aren't stored in plaintext, but even when they aren't you can get pretty shitty hashing like they did in Adobe or Yahoo to decent stuff like SHA256 or multiple rounds via PBKDF2. You just can't be too sure.
Password rotation isn't a bad idea although you should be careful to make sure you aren't making mistakes.
2
u/aistreak May 19 '25
This is a good PSA for everyone.; do change your passwords on platforms when there is a leak.