How to store password

Yes that what I was thinking, but since the decryption key needs to be stored somewhere, normally in the config folder, if someone gained access to my database and config folder they would be able to retrieve the smtp password.

But I guess in that case I'm pretty much f'ed up anyway. At least with one time hashes that can't happen, well I say can't it depends on the strength of the hashing algorithm.

In any case at least encryption provides some security measures. Thanks for the reply.

Practical guide to IgnitedCMS - Book coming soon, www.ignitedcms.com