John,

I use Cryptor and I have the tables encrypted... So, some fields (like passwords and licence) I have the field encrypted too... And I always compare the Cryptor(Original_String) with a encrypted string that is stored in the field...... so, I never put the password (decrypted) in a variable or something else.

I think this way, I have some security... But I know, nothing is impossible... We just difficult the things a little.... ;-)

[]s