>LOL....I'm blaming it on the military. LOL.
>
>I am planning on keeping the passwords encrypted in the database and requiring them to change their passwords every 90 days.

Don't store encrypted passwords. And if you must, use a block cipher


>AND (nope not done yet)...they are not going to be able to use a previously used password, LOL...yeaph you are probably right...