You ought to ofc 'salt' end users passwords just before hashing them in order to avoid with the ability to recover the original password from the hash. $endgroup$Encrypti