Store and transmit only cryptographically-protected passwords.
Cryptographically-protected passwords use salted one-way cryptographic hashes of passwords. See [NIST CRYPTO].