when using password() to store information, there is NO reversal available, that is why people use encrypt/decrypt or combos of md5
you can check to see if the info they are supplying is equal, ie password from form when encrypted == the password already encrypted in the db
but if you put "password" into the db and it comes out like "akhgeis8974392348ghf" or whatever, you can't decrypt that back into "password" when using the password() function