We should never encourage developers to store the user's password. (if we are talking about the password used on PBKDF2 function)