You need to ofc 'salt' people passwords just before hashing them in order to avoid having the ability to recover the original password from the hash. $