The future is hopefully something more secure than client-side hashing, probably SRP, or it’ll be NTLM all over again. It would be nice if web browsers implemented it directly, but until then there are JavaScript libraries like <a href="http://server.denksoft.com/wordpress/?page_id=27" rel="nofollow">http://server.denksoft.com/wordpress/?page_id=27</a> .