>If you think the seed will be easy to guess, I'm glad your users aren't mine! ;)

My users are not very sophisticated either. But when you're dealing with protecting thousands of credit cards number it makes sense not to be too relaxed.



>>But this still leaves the problem of protecting the source code and/or guarding against decompilation. Are you concerned about that?
>
>In my current specific case, not at all. It's probably overkill that I've encrypted the passwords.
>
<snip>
>
>Anyway, if you ARE concerned about your source code being decompiled, there are very good products out there for encrypting your source code. The one I know by name is ReFox. The company who makes ReFox advertises on the U.T., they've been mentioned in several threads in the past few days, but I forget the company name. You can search the threads for "refox".
>
>HTH,
>Rich.

That sounds like a good approach. I've seen their ads. Someone decompiling my EXE file is very unlikely so I can add that layer of proctection at a later date.

Thanks for the advice.

Peter