I mean when the user enters the password somewhere you need to verify if his password is correct, so you must have the password stored somewhere.

You don't, actually. You can hash the initial password (with a salt, preferably) and store that. Then to verify the password, take what the user has provided and hash it again (with the same salt) and compare.