You must ofc 'salt' users passwords right before hashing them to avoid being able to Recuperate the original password from the hash. $endgroup$