Why shouldn't you use encryption instead of hashing to store passwords?

Encryption is reversible given the right key — if the encryption key is ever leaked or compromised, every stored password can be decrypted instantly. Applications never legitimately need to read a user's original password back (only verify a match), so a one-way hash is both sufficient and far safer: even a full database leak doesn't directly expose plain-text passwords.