Regarding password encryption, this is from an official Bubble forum post (it’s 2 years old so I can’t say for sure if it still applies, or if anything’s changed - but but I’d imagine it’s still valid info):
How are passwords stored in Bubble?
We use one-way hashing and salting to store passwords. One-way hashing is an irreversible transformation: you cannot go from the hashed password back to the original password, so in a worst-case scenario if the Bubble database is compromised, the attacker won’t be able to see what the original passwords were. (The way we check a password is we hash the password that the user enters, and see if it matches the hash we have in the database. Since the only thing we care about is that the two passwords are the same, it’s not important to be able to retrieve the original password: that’s why one-way hashing is considered a best practice for password storage).
Here’s the link to the original post with more details on Bubble’s security:
Josh: Request for a Security Q&A Guide - Need help / App Organization - Bubble Forum