I'm a bit confused by this, you mention all data is encrypted and hashed but it displays the password in plain text on the site? if only the encrypted hash is being stored how is plain text version being displayed?

I have a couple of hikvision cameras working well. For a snapshot I use....

Port 80
Imageurl: /streaming/channels/1/picture

Then your ip, user and pass