I feel like this should be titled "Don't hash secrets, unless you actually know what you are doing."