Are passwords even hashed before storage? Look into implementing bcrypt.
Whoever does the backend stuff, you want to hash the inputted password locally, then send that hash to the database server. Then instead of storing passwords in plaintext, store the hash of each password. That way to...