It is best to ofc 'salt' users passwords right before hashing them to stop with the ability to Get well the original password from the hash. $endgroup$It ought to be CPU-