We verify your current password before anything changes. Passwords are stored only as hashes — nobody at Taska, including administrators, can read them.