Your integrity checking hash shouldn't be the one you use for password storage.
blog.dave.io