You must ofc 'salt' users passwords ahead of hashing them to avoid with the ability to Get well the original password from the hash. $endgroup$As you can avoid collisions