Don't store passwords. Use OpenID/OAuth/XAuth, etc.