In reply to Bright Joe.

Consider that the transmission of your password is not encrypted when you log into /wp-admin/ over http.