You must ofc 'salt' users passwords ahead of hashing them to avoid being able to Recuperate the original password from the hash. $endgroup$