Please don't do it this way. Google, Yahoo and Windows Live now all have APIs you can access to fetch contacts without having to handle the users credentials.

Getting contacts via delegated authentication should avoid aggravating the technophiles/hackers/security-aware (too much) whilst still allowing you to 'go viral'.