You must ofc 'salt' customers passwords ahead of hashing them to avoid having the ability to Get better the original password from the hash. $endgroup$