You ought to ofc 'salt' consumers passwords right before hashing them to avoid being able to recover the original password from the hash. $endgroup$Chemical separation st