You ought to ofc 'salt' users passwords just before hashing them to stay away from having the ability to Get better the original password from the hash