You should ofc 'salt' customers passwords in advance of hashing them to prevent with the ability to Recuperate the original password from the hash. $endgroup$It should be CPU-weighty to make brute power attacks more challenging/unachievable, in the event your databases will be leaked.She stated that