nothing wrong with md5 itself here, just the way it's being used. if you replace it with sha-2 you'd have the exact same problem (bcrypt is more than a simple

nothing wrong with md5 itself here, just the way it's being used. if you replace it with sha-2 you'd have the exact same problem (bcrypt is more than a simple hash function).