You need to ofc 'salt' buyers passwords before hashing them to stop with the ability to Recuperate the original password from the hash. $endgroup$