Store passwords as seeded/salted hashes (for example, by using bcrypt). On Windows reversible encryption must be disabled. More information.See also: Level 2, Level 3, Level 4, SA7, Servers A