It is best to ofc 'salt' customers passwords in advance of hashing them to stay away from with the ability to recover the original password from the hash. $endgroup$To ev