>Thank you for the links. Actually I already use the sweetpotatosoftware encryption in one place of my application (encrypting user license key) and it works very well.
>
>>Check
>>- http://doughennig.com/papers/Pub/201103dhen.pdf
>>- http://www.sweetpotatosoftware.com/spsblog/2009/08/09/MajorVFPEncryptionUpdate.aspx
>>

Hi Dmitry:

The hashing is really simple. You can do a test of concept using your user name and applying a MD5 checksum, then you save this MD5 checksum on a variable.
Next time you enter a user name and obtain the MD5 checksum, you compare this checksum with the saved one. If they are equal, the password (whatever it is) is correct, otherwise is not.

The value you send to the server is the checksum, never the real password.

That way you never store passwords, but their checksums, and you can implement it very fast.

Best regards.-