You must ofc 'salt' consumers passwords just before hashing them to stop being able to Get better the original password from the hash. $endgroup$Based on the Twitter Rule