Cannot be treated as a secure practice

Is a good way to hide passwords from hackers

Is perfectly fine for internal applications

Is perfectly fine for external user facing applications