If you ask the use for their credentials to another service, then you can't hash their password. But storing plaintext passwords is not awesome. Is there a way you can get them to type it in each time they want to use, or is that too cumbersome? Only other option is to use some other scheme like OAuth or to just be super upfront with people that we're straight-up storing their password