passwords are stored as unsalted SHA256 , perfect for rainbow tables attacks..

[divinity76]

really should come up with something stronger than an unsalted/unIVed sha256. chances are if you google most common password hashes, google translates them to passwords already.