You ought to ofc 'salt' end users passwords prior to hashing them to avoid being able to Recuperate the original password from the hash. $endgroup$