You must ofc 'salt' end users passwords right before hashing them to stay away from being able to Recuperate the original password from the hash. $endg