By the way, the comment from Aaron G on the original article is right on: Don't think you've got better security than Mensa if you're using MD5 to hash your use

By the way, the comment from Aaron G on the original article is right on: Don't think you've got better security than Mensa if you're using MD5 to hash your users' password -- you should be using something along the lines of bcrypt. http://openwall.com/phpass/ http://openwall.com/phpass/