wwAPI:Logonuser() has the ability for you to send a userid/pw to a windows domain and get back a result if the user is "authenticated". That way you could just store the user id in Fox, forget about the passwords and just let windows handle the passwords. There are some restrictions in using logonuser() and a inexpensive VFP FLL called vpass.fll gets around those limitations nicely.

Kevin