You ought to ofc 'salt' end users passwords right before hashing them to avoid being able to Get well the original password from the hash. $endgroup$It ought to be CPU-we