It is best to ofc 'salt' buyers passwords before hashing them to stay away from being able to Recuperate the original password from the hash. $endgroup