You must ofc 'salt' users passwords just before hashing them to stop with the ability to recover the original password from the hash. $endgroup$$begingroup$ As hashes a