well I won't make this mistake again now that I understand how easy it is to match a hash to a password.