The $salt needed to check get the module to check against the crypted in the database is $salt = substr ($p, 0, 2), with $p beeing the plaintext password that is inserted into the database. And when the encrypted directive is set to password It assumes you used this $salt.