If you're using any hash directly for password storage you're doing it wrong, regardless of the specifics. PBKDF2-SHA2 with a reasonably high amount of rounds

If you're using any hash directly for password storage you're doing it wrong, regardless of the specifics. PBKDF2-SHA2 with a reasonably high amount of rounds (>100000) is still okay-ish, although you should have transited to bcrypt years ago. And hopefully we'll see argon2 stabilizing and getting adoption soon™.