At work, we are moving a CRM to a hosted solution. I haven't been much involved in the selection process, but have asked some questions on password hashing that as it turns out we probably should have ...