You must ofc 'salt' buyers passwords prior to hashing them to prevent being able to Get better the original password from the hash. $endgroup$