You need to ofc 'salt' end users passwords just before hashing them to avoid with the ability to Get better the original password from the hash. $endgroup$$begingroup$ As