Commit Account without password and without events

What happens with the hashed password on ‘User’ when i create an ‘Account’ in a MF without a password, and commit Account without events? The commit works fine in this scenario, but what password is set in the attribute Password on User? I tried logging in locally without password for a created account like this, but this doesnt work. I need to know if this is safe or not.