Hi If you like to use a database (for example access) to store usernames and passwords ,you can encrypt passwords so if someone has direct access to database can't use them.Then when a use wants to login get his/her password encrypt it(using the same encryption method for stored passwords) and compare it with the encrpyted password(For security reasons it's better to encrypt the provided password rather than decrypting the stored one) If you like to prevent people accessing the database itself you should make it password protected ( an access database has two kind of authentication , you can provide a password for admin user or you can provide a password for the database itself.By defining a password for admin user you are defining a password for the access application not your database it means that if you want to open any database using your access application you should provide the admin password. If you set a password for you database then the database is password protected and even if somebody gets a copy of it he/she can't open it unless he/she knows the password. Regards