Never store plain passwords in production. Use SHA256 hashing.