md5 is something you should activate as it increases the significant characters in your password to more than 8. All explained in that link a lot better than I could do.
In a nutshell, say you have the following passwd: goodpass£TFJ8-#:
Without md5 only the first 8 chars would be used and "goodpass" isn't really a good password