Salts make no difference here. They do not harden passwords, but make an otherwise deterministic process random to ensure no two inputs result in the same outp

Salts make no difference here. They do not harden passwords, but make an otherwise deterministic process random to ensure no two inputs result in the same output. Of course, using a slower hash algorith will increase the time required to break it... but we know the majority of sites don't adequately protect passwords. There are 331 breaches on HIBP. 108 used MD5, 43 used SHAx... meaning half of all firms used algorithms which we can break quickly & easily.