I use SHA1 Algo for hashing the password also add salt but even its travel in plain text when check the security by testing tool. How can i protect it ?