Yes, there are many many more secure schemes out there.  By minimum I meant minimum.<p>The point was what the client sends should not be what&#x27;s in the database or easily reversible from what&#x27;s in the database.  I guess the larger point was you can&#x27;t trust clients in any way shape or form.