I am developing a website and I would like to allow users to use XMPP for live chat. I would like users to have the option use an existing XMPP account if they wish and store their XMPP username and password with their other account details.
Obviously, there's a big issue with just storing passwords as plain text. Is two-way encryption sufficient here? I am just at a loss for a solution.