I've been thinking about this as well; the results I could find are from quite a while ago, but in general the answer is to use a reversible encryption like AES

I've been thinking about this as well; the results I could find are from quite a while ago, but in general the answer is to use a reversible encryption like AES [1] along with secure storage of the encryption key [2], preferably on another server or in an isolated part of the server. Not particularly satisfying, is it... [1]: http://stackoverflow.com/questions/1878830/securly-storing-openid-identifiers-and-oauth-tokens http://stackoverflow.com/questions/1878830/securly-storing-o... [2]: http://security.stackexchange.com/questions/12332/where-to-store-a-key-for-encryption http://security.stackexchange.com/questions/12332/where-to-s...