Are user passwords stored in the database in an encrypted format?

Yes, user passwords are stored in the database encrypted using Argon2.