Once this is done
Bad security advice
“”The only way to retrieve the plain-text of a hashed password is bruteforcing or finding potential collisions. Even if the password database was compromised, every password it contains would need to be bruteforced individually. The process of salting the hashing algorithm adds an extra layer of complexity to the bruteforcing process.
This section underestimates the importance of salting. When salts aren't used, or aren't used properly, the database is open to attacks such as lookup tables and reverse lookup tables (the latter is perhaps the worst, since it allows the attacker to find any users with the same password; they might not even need to crack any passwords in the first place, but simply look for people whose passwords match the hash of "password" or some other presumably common password.) Brute force is only necessary when salts are generated and used the right way.