It's better to 'encrypt' rather than 'encode', as you can decode encoded strings, but not one-way hashes. E.G.: http://www.php.net/md5 http://www.php.net/sha1 Jay