Nice'n'easy solution is to use WriteProfileString().

Use the username as the section, and it will keep all your users details together.

Unless you have an extraordinarily high level of concurrent logins you won't experience a locking problem.

If you do experience locking problems then it is time to switch to a database solution.

Keep an eye on the access times though. If the time taken to update the INI file gets out of hand you may need to split the files by using the first letter of the login in the file name or similar.