@dgar Passwords arent usually stored in plain text - only a one way hash which is calculated and compared every time you enter it
The people who crack those hashes have to store the data somehow, and CSV, while not perfect, or even very good, is easy to implement