Should I create the password column as a regular varchar and then insert like this:
sha1($pass_string)
Or should I do something extra upon the
Most people save the hash as you have suggested. It's safe enough and simple, making it a good choice.
Note that all hashes can be cracked eventually, so any hash is better than none and SHA is strong enough.