i think you are in wrong place... it is java forum... some one should move this topic to IT Water Cooler.

so you want to authenticate passwords without having the passwords stored anywhere in any way.

How the heck are you going to know if the password entered is the correct one if you have nothing to compare it with?

Senseless "requirements", design rejected.

am still hoping on some thing, the reason for the project password authentication without data base is to circumvent the security issue of password verifier being stolen on the server which can still make the adversary to implicate a rightful user i have an idea but the only problem i am having now is problem that it is still impossible for a user to be change his password if need be what i did to generate the password is that i used a message hash which will use some of the attributes summited during registration to get a password which will be given to the user user will then submit his password and also the other field when logging in the server will then try to use the fields to see if it will generate the supplied password if not it will not authenticate the user i will see to it that you will get the code later today