I can't remember what the final verdict was, but is show_encryption supposed to be on or off by default? In the framework/Auth/Auth/sql.php it says off by default, but the code says on by default. Which one was it? Thanks Amith