Use Hmac instead of Hash to make dictionary attacks harder.