Typically, when you enable service password encryption on a Cisco device, the plaintext passwords in the device's configuration file are replaced with encrypted versions. If you type "no service password encryption" to turn off this feature, the encrypted passwords will be decrypted and stored in the configuration file in plaintext form. Therefore, if you modify any password while service password encryption is enabled, the encrypted version will be stored in the configuration file. But if you later turn off the feature using the "no service password encryption" command, the encrypted password will be stored in plaintext form in the configuration file.