A website stores passwords in the format SHA-256(mot_de_passe), without a salt.
SHA-256(mot_de_passe)
What are the two problems, and how can they be fixed?