Use bcrypt hashing algorithm for passwords instead of md5