GfK #1 Yeah, use PHP's MD5() function to store encrypted passwords. When a user logs in, MD5 their input and compare that against the user database. If the MD5s match, the password is correct.