Read: http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/ Since you're running on GAE you're likely using e

Read: http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/ Since you're running on GAE you're likely using either python or java: Python bcrypt implementation: http://www.mindrot.org/projects/py-bcrypt/ http://www.mindrot.org/projects/py-bcrypt/ Java bcrypt implementation: http://www.mindrot.org/projects/jBCrypt/ http://www.mindrot.org/projects/jBCrypt/