A little know fact about the Vtiger client portal is that the passwords are not encrypted. Allan Lord recently gave the Vtiger community a solution for this. It’s on track to be included in 6.5. Alan has noted some issues with what the version that is queued in 6.5, but hopefully it will get worked out prior to release. Let us know if you want help implementing this now or if you want a demo of the fix.