What happens when a customer's product takes off and gets spammed with 300 fake accounts and stolen credit cards?

Encrypting passwords before storing them is a BAD idea!

Protecting your web application against malicious attackers can feel like a full-time job that requires a PHD in Cybersecurity, but it doesn't have to be complicated.