[a12735497073]

Why should I store MD5 passwords in the database instead of the real thing? How does the user log in??

[nohmar]

MD5 is nice because if someone gets a hold of your database, they don't have the actual password. The user logs in by typing the normal password and you can check if the md5 of what they typed in is the same as what's in the database.

[Skylude]

What Nohmar said is right. The other benefit is that MD5 is extremely difficult to reverse back to the original text.

[Skylude]

One more thing to note, if you need to at some point get the password back I would look into use SALT and sha1 or some other reversible encryption.

[a12735497073]

Thanks!