the way i have created the password and pin number encryption is you the value (password and 4 digit pin number) if both are enabled
and then it encrypts it and stores the value of the encryption and salt code (simular as the forum)...
i am thinking of making a random generated version ie admin can set up so that users can't create there own password etc they are auto maticlly generated ...
so a bit like a serialiser .. you could have the username and just the password feature and make the password able to be 20 charecters long say ..
for example 1123-3444-4567992245
and if matchs go to the url/protected page....
i think that answers your question if not email me or post here and you have me on MSN
basiclly the pin number is simular to the password but it has 4 values and they need to match ,.....
i