The logic behind this is in database you need to store the infomation in encrypted form. what you do in asp is when you get the password, you pass it to a variable and that variable you pass to a function which does the encryption and the result of the function you store in the database. Seppuku has already provided you a solution for that.