The ICO have issued new guidance regarding passwords and encryption.

The advice includes use of password as well as alternatives and defending against attacks.  With regard to encryption measures need to be in place to make sure personal data is processed securely.

The ICO website gives you further guidance on the use of passwords here and encryption here.