By default this is only Administrators on single site installations, and Super Admins on Multisite installations. Passwords are not (and cannot be) revealed..