MD5 or SHA-1 from the crypto package is broken and unsuitable for passwords or integrity.
Use SHA-256 or stronger, and bcrypt, scrypt, or Argon2 for password hashing.