You should ofc 'salt' users passwords in advance of hashing them to prevent with the ability to Get better the original password from the hash. $endgroup$$begingroup$ A