At no time will anyone EVER ask you for your phillymetal.com password. If someone emails you asking for it, please contact support right away.
Private Message information is NOT encrypted. That means that under no circumstances should you send any sensitive information through PMs. This does not mean that I am looking at your stuff but it does mean that if the site/DB gets hacked or we have a situation where I am legally obligated to provide access to a third party, they will be able to see your stuff.
Your IP address is logged when you login.