title: use each user's password as encryption key for his own data
body: <p>I want to encrypt user's personal data then save them in database .</p>
  
  <p>the encryption must be done in application ( I can't do that in sql server side )</p>
  
  <p>now I wonder if it's possible to use each user's password to encrypt and later decrypt their data ? what are pros and cons of this approach /</p>