You should hash the passwords before storing them. Then when a user attempts to logon, take their entered password and hash it, and compare that to what's in your record.