Properties: one-way (preimage resistance), collision resistant (no two inputs → same output), avalanche effect (small change = completely different output), deterministic.
SHA-256 has these properties; MD5 does not (collisions found). A good hash function makes password cracking computationally infeasible even with GPUs when properly salted.