To check if user exists you need to check whether email id is existing or not and we are not encrypting the email. Hope it clears your doubt :).