Larry, better to use a MD5 hash. This is more secure than encryption- to encrypt you'll need a key and if somebody gets hold of the key, it's easy to scoop the password. whereas if you slightly modify the password using chrtran() or prefixing the username or whatever, a brute-force attack always is needed to overcome a hash. Possibly not important in general use, but it will satisfy most security audits and it's just as easy as encrypting. Craig Boyd's vfpencryption.fll contains a MD5 hash function.
"... They ne'er cared for us
yet: suffer us to famish, and their store-houses
crammed with grain; make edicts for usury, to
support usurers; repeal daily any wholesome act
established against the rich, and provide more
piercing statutes daily, to chain up and restrain
the poor. If the wars eat us not up, they will; and
there's all the love they bear us."
-- Shakespeare: Coriolanus, Act 1, scene 1