The method GetPasswordHash returns a hash string on the user password that can be used with functions LoginByHash and SavePasswordHash.
Hash (MD5) on the real password of a user. You can obtain the MD5 hash on the current user password by calling $USER->GetParam("PASSWORD_HASH"). For an arbitrary user, the MD5 hash can be obtained by
calling the method CUser::GetByID (field "PASSWORD").