Does that offer any real protection? I could try each possible character until I find the hash.