Hi Rocco, welcome to OpenACS.org
See https://openacs.org/doc/openacs-5-1/security-design.html . It is SHA1. Since users have a bad habit of using the same password in many places, having the passwords hashed protects them in case someone gets access to your database.
By the way, typing in all capital letters is considered SHOUTING and will probably not improve the help you get.