Take a good look at OpenID and oAuth - that way you can offer secure sign up / login without having to manage user passwords - well unless you offer that as an

Take a good look at OpenID and oAuth - that way you can offer secure sign up / login without having to manage user passwords - well unless you offer that as an additional option.