Seconded. I would add that you should use more than one form of cryptography: one type for sensitive contact information and another for passwords. For interna

Seconded. I would add that you should use more than one form of cryptography: one type for sensitive contact information and another for passwords. For internal support you often need to decrypt names, address, email but you don't want that same algorithm for passwords, credit cards, etc.