You should ofc 'salt' people passwords right before hashing them in order to avoid being able to Recuperate the original password from the hash. $endgr